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Abstract 



The purpose of this paper is to give an exposition of material dealing with constructive logics, 
typed A-calculi, and linear logic. The emergence in the past ten years of a coherent field 
of research often named "logic and computation" has had two major (and related) effects: 
firstly, it has rocked vigorously the world of mathematical logic; secondly, it has created 
a new computer science discipline, which spans from what is traditionally called theory of 
computation, to programming language design. Remarkably, this new body of work relies 
heavily on some "old" concepts found in mathematical logic, like natural deduction, sequent 
calculus, and A-calculus (but often viewed in a different light), and also on some newer 
concepts. Thus, it may be quite a challenge to become initiated to this new body of work (but 
the situation is improving, there are now some excellent texts on this subject matter). This 
paper attempts to provide a coherent and hopefully "gentle" initiation to this new body of 
work. We have attempted to cover the basic material on natural deduction, sequent calculus, 
and typed A-calculus, but also to provide an introduction to Girard's linear logic, one of the 
most exciting developments in logic these past five years. The first part of these notes gives 
an exposition of background material (with the exception of the Girard-translation of classical 
logic into intuitionistic logic, which is new). The second part is devoted to linear logic and 
proof nets. 



Resume 

Le but de cet article est de donner une presentation d'elements de logique constructive, 
de lambda calcul type, et de logique lineaire. L' emergence, ces dix dernieres annees, d'un 
domaine coherent de recherche souvent appele "logique et calcul" a eu deux effets majeurs 
(et concommi tents): tout d'abord, elle a dynamise le monde de la logique mathematique; 
deuxiemement, elle a creee une nouvelle discipline d'informatique, discipline qui s'etend 
depuis ce qu'on appelle traditionellement la theorie de la calculabilite a la conception des 
langages de programmation. Remarquablement, ce corps de connaissances repose en grande 
partie sur certains "vieux" concepts de logique mathematique, tel que la deduction naturelle, le 
calcul des sequents, et le A-calcul (mais souvent vus avec une optique differente), et d'autres 
concepts plus nouveaux. II est done assez difficile de s'initier a ce nouveau domaine de 
recherche (mais la situation s'est amelioree depuis l'apparition d'excellents livres sur ce sujet). 
Cet article essaye de presenter "en douceur" et de faqon coherente ce corps de travaux. Nous 
avons essaye de couvrir des sujets classiques tels que la deduction naturelle, le calcul des 
sequents, et le A-calcul type, mais aussi de donner une introduction a la logique lineaire de 
Girard, un des developements en logique les plus interessants de ces cinq dernieres annees. 
Dans une premiere partie nous presentons les bases (a l'exception de la traduction de Girard 
de la logique classique en logique intuitionniste, qui est nouvelle). La logique lineaire et les 
reseaux de preuves sont traites dans la deuxieme partie. 
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1 Introduction 

The purpose of this paper is to give an exposition of material dealing with constructive logics, 
typed A-calculi, and linear logic. During the last fifteen years, a significant amount of research 
in the areas of programming language theory, automated deduction, and more generally logic 
and computation, has relied heavily on concepts and results found in the fields of constructive 
logics and typed A-calculi. However, there are very few comprehensive and introductory 
presentations of constructive logics and typed A-calculi for noninitiated researchers, and many 
people find it quite frustrating to become acquainted to this type of research. Our motivation 
in writing this paper is to help fill this gap. We have attempted to cover the basic material on 
natural deduction, sequent calculus, and typed A-calculus, but also to provide an introduction 
to Girard's linear logic [7], one of the most exciting developments in logic these past five 
years. As a consequence, we discovered that the amount of background material necessary for 
a good understanding of linear logic was quite extensive, and we found it convenient to break 
this paper into two parts. The first part gives an exposition of background material (with the 
exception of the Girard-translation of classical logic into intuitionistic logic, which is new [9]). 
The second part is devoted to linear logic and proof nets. 

In our presentation of background material, we have tried to motivate the introduction of 
various concepts by showing that they are indispensable to achieve certain natural goals. For 
pedagogical reasons, it seems that it is best to begin with proof systems in natural deduction 
style (originally due to Gentzen [3] and thoroughly investigated by Prawitz [14] in the sixties). 
This way, it is fairly natural to introduce the distinction between intuitionistic and classical 
logic. By adopting a description of natural deduction in terms of judgements, as opposed to 
the tagged trees used by Gentzen and Prawitz, we are also led quite naturally to the encoding 
of proofs as certain typed A-terms, and to the correspondence between proof normalization and 
/3-conversion (the Curry/Howard isomorphism [10]). Sequent calculi can be motivated by the 
desire to obtain more "symmetric" systems, but also systems in which proof search is easier to 
perform (due to the subformula property). At first, the cut rule is totally unnecessary and even 
undesirable, since we are trying to design systems as deterministic as possible. We then show 
how every proof in the sequent calculus (Qi) can be converted into a natural deduction proof 
(in Afi). In order to provide a transformation in the other direction, we introduce the cut rule. 
But then, we observe that there is a mismatch, since we have a transformation J\f: Qi — > Mi 
on cut-free proofs, whereas Q:Mi — > Q\ ut maps to proofs possibly with cuts. The mismatch 
is resolved by Gentzen's fundamental cut elimination theorem, which in turn singles out the 
crucial role played by the contraction rule. Indeed, the contraction rule plays a crucial role 
in the proof of the cut elimination theorem, and furthermore it cannot be dispensed with in 
intuitionistic logic (with some exceptions, as shown by some recent work of Lincoln, Scedrov, 
and Shankar [12]). We are thus setting the stage for linear logic, in which contraction (and 
weakening) are dealt with in a very subtle way. We then investigate a number of sequent 
calculi that allow us to prove the decidability of provability in prepositional classical logic 
and in prepositional intuitionistic logic. The cut elimination theorem is proved in full for the 
Gentzen system CK using Tait's induction measure [18], and some twists due to Girard [8]. We 
conclude with a fairly extensive discussion of the reduction of classical logic to intuitionistic 
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logic. Besides the standard translations due to Godel, Gentzen, and Kolmogorov, we present 
an improved translation due to Girard [9] (based on the notion of polarity of a formula). 

2 Natural Deduction and Simply-Typed A-Calculus 

We first consider a syntactic variant of the natural deduction system for implicational 
propositions due to Gentzen [3] and Prawitz [14]. 

In the natural deduction system of Gentzen and Prawitz, a deduction consists in deriving a 
proposition from a finite number of packets of assumptions, using some predefined inference 
rules. Technically, packets are multisets of propositions. During the course of a deduction, 
certain packets of assumptions can be "closed", or "discharged". A proof is a deduction 
such that all the assumptions have been discharged. In order to formalize the concept of a 
deduction, one faces the problem of describing rigorously the process of discharging packets 
of assumptions. The difficulty is that one is allowed to discharge any number of occurrences 
of the same proposition in a single step, and this requires some form of tagging mechanism. 
At least two forms of tagging techniques have been used. 

• The first one, used by Gentzen and Prawitz, consists in viewing a deduction as a tree 
whose nodes are labeled with propositions. One is allowed to tag any set of occurrences 
of some proposition with a natural number, which also tags the inference that triggers the 
simultaneous discharge of all the occurrences tagged by that number. 

• The second solution consists in keeping a record of all undischarged assumptions at every 
stage of the deduction. Thus, a deduction is a tree whose nodes are labeled with expressions 
of the form r i- A, called sequents, where A is a proposition, and T is a record of all 
undischarged assumptions at the stage of the deduction associated with this node. 

Although the first solution is perhaps more natural from a human's point of view and more 
economical, the second one is mathematically easier to handle. In the sequel, we adopt 
the second solution. It is convenient to tag packets of assumptions with labels, in order to 
discharge the propositions in these packets in a single step. We use variables for the labels, 
and a packet consisting of occurrences of the proposition A is written as x: A. Thus, in a 
sequent r i- A, the expression F is any finite set of the form x\: A\, . . . , x m : A m , where the 
X{ are pairwise distinct (but the A{ need not be distinct). Given r = x\ \ A\, . . . , x m : A m , the 
notation r, x: A is only well defined when x ^ X{ for alH, 1 < i < m, in which case it denotes 
the set x\\ A\, . . . , x m : A m , x: A. We have the following axioms and inference rules. 

Definition 1 The axioms and inference rules of the system Af^ (minimal implicational logic) 
are listed below: 

F,x: At- A 
F,x:Ai-B 

(D-intro) 

fhiDB 
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ri- A d B Ft- A 

(D-elim) 

ri- b 



In an application of the rule (D-intro), we say that the proposition A which appears as a 
hypothesis of the deduction is discharged (or closed). It is important to note that the ability 
to label packets consisting of occurrences of the same proposition with different labels is 
essential, in order to be able to have control over which groups of packets of assumptions are 
discharged simultaneously. Equivalently, we could avoid tagging packets of assumptions with 
variables if we assumed that in a sequent F i- C, the expression F, also called a context, is a 
multiset of propositions. The following two examples illustrate this point. 



Example 2.1 Let 

r = x: A d (B D C), y: A D B, z: A. 

r i- ad (Bp q Ft- a f*-Adb f*-a 

Fi- B D C Fi- B 

x:AD(BDC),y:ADB,z:At-C 
x: A D (B D C),y: A D B i- A d C 
x: A d (B D C)t- (A d B) d (A d C) 
*- (AD(BD C)) D ((A C)) 



In the above example, two occurrences of A are discharged simultaneously. Compare with 
the example below where these occurrences are discharged in two separate steps. 



Example 2.2 Let 

r = x: A d (B D C),y: A D B, z\\ A, z 2 : A. 
r i- AD (B DC) Ft- A Ft- AD B 



Tt- B D C Tt- B 

x: A D (B D C),y:AD B,z x : A,z 2 : Ai- C 
x:AD(BDC),y:ADB,z l :Ai-ADC 
x:AD(BD C), z x : At- (A D B) D (A D C) 
zy.At- (Ad{BdC))d {(A D B) D (A D C)) 

r- Ad ({Ad (B d C)) d {{A d B)d(Ad C))) 
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For the sake of comparison, we show what these two natural deductions look like in the 
system of Gentzen and Prawitz, where packets of assumptions discharged in the same inference 
are tagged with a natural number. Example 2. 1 corresponds to the following tree: 

Example 2.3 

(Ad (B D C)) 3 A 1 (A D Bf A 1 

B DC B 

C 

l 

A D C 

2 

(A D B) D (A D C) 

3 

(A D (B D C)) D {(A D B) D (A D C)) 



and Example 2.2 to the following tree: 
Example 2.4 

(A D (B D C)) 3 A 1 (A D Bf A 4 

B DC B 

C 

l 

Ad c 

2 

(Ad B) d (Ad C) 

3 

(A D (B D C)) D {(A D B)D(AD C)) 
4 

A D [{A D (B D C)) D {(A D B) D (A D C))) 



It is clear that a context (the T in a sequent r i- A) is used to tag packets of assumptions 
and to record the time at which they are discharged. From now on, we stick to the presentation 
of natural deduction using sequents. 

Proofs may contain redundancies, for example when an elimination immediately follows an 
introduction, as in the following example: 
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Y,x:A\-B 



V 2 

ri- a 



ri- a d b 



T\- B 



Intuitively, it should be possible to construct a deduction for T i- B from the two deductions 
V\ and T>2 without using at all the hypothesis x: A. This is indeed the case. If we look closely 
at the deduction V\, from the shape of the inference rules, assumptions are never created, and 
the leaves must be labeled with expressions of the form r, A, x: A, y: C t- C or T, A, x: A t- A, 
where y ^ x. We can form a new deduction for T i- B as follows: in V\ , wherever a leaf of the 
form r, A,k:4i- A occurs, replace it by the deduction obtained from T>2 by adding A to the 
premise of each sequent in X> 2 - Actually, one should be careful to first make a fresh copy of T>2 
by renaming all the variables so that clashes with variables in V\ are avoided. Finally, delete 
the assumption x : A from the premise of every sequent in the resulting proof. The resulting 
deduction is obtained by a kind of substitution and may be denoted as T>i[T>2/x], with some 
minor abuse of notation. Note that the assumptions x : A occurring in the leaves of the form 
r, A, x: A, y: C t- C were never used anyway. This illustrates the fact that not all assumptions 
are necessarily used. This will not be the case in linear logic [7]. Also, the same assumption 
may be used more than once, as we can see in the (~j-elim) rule. Again, this will not be the 
case in linear logic, where every assumption is used exactly once, unless specified otherwise 
by an explicit mechanism. The step which consists in transforming the above redundant proof 
figure into the deduction V\ [T>2/x] is called a reduction step or normalization step. 

We now show that the simply-typed A-calculus provides a natural notation for proofs in 
natural deduction, and that /3-conversion corresponds naturally to proof normalization. The 
trick is to annotate inference rules with terms corresponding to the deductions being built, by 
placing these terms on the righthand side of the sequent, so that the conclusion of a sequent 
appears to be the "type of its proof". This way, inference rules have a reading as "type- 
checking rules". This discovery due to Curry and Howard is known as the Curry/Howard 
isomorphism, or formulae-as-types principle [10]. Furthermore, and this is the deepest aspect 
of the Curry /Howard isomorphism, proof normalization corresponds to term reduction in the 
A-calculus associated with the proof system. 

Definition 2 The type-checking rules of the X-calculus X D (simply-typed X-calculus) are listed 
below: 



r, x: A i- x: A 
F,x:Ai-M:B 



(abstraction) 



ri- (Xx:A.M):A D B 



Ti-M:AdB Fi-N:A 



(application) 



Ft- (MN): B 
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Now, sequents are of the form T i- M: A, where M is a simply-typed A-term representing 
a deduction of A from the assumptions in T. Such sequents are also called judgements, and F 
is called a type assignment or context. 

The example of redundancy is now written as follows: 



Now, V\ is incorporated in the deduction as the term M, and T>2 is incorporated in the 
deduction as the term N . The great bonus of this representation is that V\\T>2lx\ corresponds 
to M[N/x], the result of performing a /3-reduction step on (Aa:: A. M)N . 

Thus, the simply-typed A-calculus arises as a natural way to encode natural deduction proofs, 
and (3 -reduction corresponds to proof normalization. The correspondence between proof 
normalization and term reduction is the deepest and most fruitful aspect of the Curry /Howard 
isomorphism. Indeed, using this correspondence, results about the simply-typed A-calculus 
can be translated in terms of natural deduction proofs, a very nice property. 

When we deal with the calculus X D , rather than using D, we usually use — >, and thus, the 
calculus is denoted as A~\ In order to avoid ambiguities, the delimiter used to separate the 
lefthand side from the righthand side of a judgement Tt- M:A will be >, so that judgements 
are written as F > M: A. 

3 Adding Conjunction, Negation, and Disjunction 

First, we present the natural deduction systems, and then the corresponding extensions of 
the simply-typed A-calculus. As far as proof normalization is concerned, conjunction does 
not cause any problem, but as we will see, negation and disjunction are more problematic. In 
order to add negation, we add the new constant _L (false) to the language, and define negation 
—iA as an abbreviation for A D_L. 

Definition 3 The axioms and inference rules of the system J^f?' A ' v '' L (intuitionistic proposi- 
tional logic) are listed below: 



F,x:Ai- M:B 



Ft- (Xx: A. M): A d B 



Fi- N: A 



Fi- (Xx:A.M)N:B 



F,x: At- A 



F,x:Ai-B 



(D-intro) 



ri- A d B 



ri- a d b ri- a 



Ft- B 



(D-elim) 
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Ft- A Ft- B 

( A-intro ) 

Ft-AAB 



F i- A A B ri-AAB 

(A-elim) (A-elim) 

Fi-A Fi-B 



Fi- A Fi- B 

(V-intro) (V-intro) 



Ft- AV B Ft- AV B 

Ft- AVB F,x:At-C F,y:Bt-C 
Ft-C 

(.L-elim) 

Fi- A 



(V-elim) 



Minimal propositional logic ^/^' A ' v '- L is obtained by dropping the (L-elim) rule. In order to 
obtain the system of classical propositional logic, denoted MJ > '^' S/ ' L , we add to ^/^' A ' v '- L the 
following inference rule corresponding to the principle of proof by contradiction (by-contra) 
(also called reductio ad absurdum). 

r,i:-iAi-l 

(by-contra) 



Several useful remarks should be made. 

(1) In classical propositional logic (A/" C :5,A,V, " L ), the rule 

ri-i 

(±-elim) 

Ft- A 

can be derived, since if we have a deduction of F t-±, then for any arbitrary A we have a 
deduction x: —\A, F t-±, and thus a deduction of F t- A by applying the (by-contra) rule. 

(2) The proposition A D —r-tA is derivable in A/"™ ,A,V,J -, but the reverse implication 
—i— i A D A is not derivable, even in J\fr > ' A ' s/ ' ± . On the other hand, —i—iA D A is derivable in 

x: —i—i A, y: —\A i —i—iA x: —i—iA, y: —\A i —iA 



x: —i— i A, y: —iA i-_L 

(by-contra) 

x: -i-iA t- A 
i- -r-iA D A 
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(3) Using the (by-contra) inference rule together with (3-elim) and (V-intro), we can prove 
-i A V A (that is, (A D_L) V A). Let 

r = x: ((A D_L) V A) D-L, y: A. 

We have the following proof for (A D-L) V A. 

Ft- A 



r i- ((A D-L) V A) D-L ri-(ADl)VA 

a;: ((A D-L) V A) D-L, y: A i-_L 

a;: ((A D-L) V A) D-Li- A D_L 

a:: ((A D-L) V A) D-Li- ((A D-L) V A) D-L a;: ((A D-L) V A) D_Li- (A D-L) V A 

a:: ((A D-L) V A) D-Li-_L 
(by-contra) 

t- (A D-L) V A 

The typed A-calculus A^ ,X,+,J - corresponding to 1 A/^ D ' A ' V '" L is given in the following 
definition. 

Definition 4 The typed X-calculus A^ ,X,+,J - is defined by the following rules. 

r, x: A > x: A 
F,x:A>M:B 



F>(\x: A.M): A -» 5 

r>(MJV):5 

T>M:A r>JV:5 
r > (M, JV): A x B 



(abstraction) 
(application) 
(pairing) 



F > M: Ax B F>M:AxB 

(projection) (projection) 

T>v l (M):A r>ir 2 (M):B 

T> M: A T>M:B 

( injection ) : ( injection ) 



T> inl(M): A + B T > inr(M): A + B 

T>P:A + B F,x:A>M:C F,y:B>N:C 



T > case(P, Aa:: A. M, Xy: B. N): C 
T>M:_L 

(±-elim) 



(by -cases) 



F> A A (M): A 
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A syntactic variant of case(P,Xx: A. M,Xy:B. N) often found in the litterature is 

case P of Lnl(x: A) M | inr(j/: B) N, or even case P of inl(a;) 
M | inr(2/) =>- N , and the {by -cases) rule can be written as 

T>P:A + B F,x:A>M:C F,y:B>N:C 

(by-cases) 



T > (case P of inl(x: A) =>- M \ ±nr(y: B) =>- N): C 
We also have the following reduction rules. 

Definition 5 The reduction rules of the system A - *'*'" 1 "'- 1 are listed below: 

(Xx:A.M)N — > M[N/x], 

T2((M, N)) — > N, 
case(inl(P), Aa:: A. M, Xy: B. N) — > M[P/x], or 
case inl(P) of inl(x: A) =>- M \ ±nr(y: B) ^ N — > M[P/x], 

case(inr(P), Aa;: A. M, Xy: B. N) — > N[P/y], or 
case inr(P) of inl(x: A) => M \ ±nr(y: B) => N — > N[P/y], 

A A ^ B (M)N — A B (M), 
^(Aa^M)) — A A (M), 
ir 2 (A AxB (M)) — A B (M), 
case(A,i +B (P), As: A. M, Xy: B. N) — > A C (P), 

A^(A ± (M)) — A^(M). 



Alternatively, as suggested by Ascander Suarez, we could replace the rules for case by the 
rules 

case(inl(P),M,JV) — > MP, 
case(inr(P),M,JV) — > NP, 
case(A A+B (P),M,N) — A C (P). 

A fundamental result about natural deduction is the fact that every proof (term) reduces to a 
normal form, which is unique up to a-renaming. This result was first proved by Prawitz [15] 
for the system Af?' A ' s/ ' ± . 

Theorem 1 (Church-Rosser property, Prawitz (1971)) Reduction in a^' 4 "'- 1 (specified 
in Definition 5) is confluent. Equivalently, conversion in A _>,x,+, - L is Church-Rosser. 

A proof can be given by adapting the method of Tait and Martin-Ldf [13] using a form of 
parallel reduction (see also Stenlund [16]). 
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Theorem 2 (Strong normalization property, Prawitz (1971)) Reduction in X^'*^' 1 - (asin 
Definition 5) is strongly normalizing. 

A proof can be given by adapting Tait's reducibility method [17], [19], as done in Girard [5] 
(1971), [6] (1972) (see also Gallier [2]). 

If one looks at the rules of the system 1 A/^ D ' A ' V '" L (or A^'*'" 1 "'- 1 ), one notices a number of 
unpleasant features: 

(1) There is an asymmetry between the lefthand side and the righthand side of a sequent (or 
judgement): the righthand side must consist of a single formula, but the lefthand side 
may have any finite number of assumptions. This is typical of intuitionistic logic, but it 
is also a defect. 

(2) Negation is very badly handled, only in an indirect fashion. 

(3) The (~j-intro) rule and the (W-elim) rule are global rules requiring the discharge of 
assumptions. 

(4) Worse of all, the (V-e/im) rule contains the parasitic formula C which has nothing to do 
with the disjunction being eliminated. 

Finally, note that it is quite difficult to search for proofs in such a system. Gentzen's sequent 
systems remedy some of these problems. 

4 Gentzen's Sequent Calculi 

The main idea is that now, a sequent T i- A consists of two finite multisets T and A 
of formulae, and that rather than having introduction and elimination rules, we have rules 
introducing a connective on the left or on the right of a sequent. A first version of such a 
system for classical propositional logic is given next. In these rules Y and A stand for possibly 
empty finite multisets of propositions. 

Definition 6 The axioms and inference rules of the system ^ 1 ? ,A,v, ~'/or classical propositional 
logic are given below. 

A,Fi-A,A 

A,A,Tt-A Tt-A,A,A 

(contrac: left) (contrac: right) 

A, T i- A Fi-A,A 

A,B,Fi-A r i- A, A T i- A, B 

(A: left) (A: right) 

AhB,Ti- A J Fi-A,AAB 5 
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A,Tt-A B,Tt-A Fi-A,A,B 

— (y.left) — — (V: right) 

iV5,ri-A ri-A,iV5 



ri-A,4 B.rhA A,Ti-A,B 

(D:left) (D: right) 

AD B, Ft- A J Ft- A, AD B 5 

Fi-A,A A,Fi-A 

(^.left) —L- (aright) 



->A,Ft-A Ft-A,->A 

Note the perfect symmetry of the left and right rules. If one wants to deal with the extended 
language containing also _L, one needs to add the axiom 

_l, r i- a. 



One might be puzzled and even concerned about the presence of the contraction rule. 
Indeed, one might wonder whether the presence of this rule will not cause provability to be 
undecidable. This would certainly be quite bad, since we are only dealing with propositions ! 
Fortunately, it can be shown that the contraction rule is redundant for classical prepositional 
logic. But then, why include it in the first place? The main reason is that it cannot be 
dispensed with in intuitionistic logic, or in the case of quantified formulae. (Recent results 
of Lincoln, Scedrov, and Shankar [12], show that in the case of prepositional intuitionistic 
restricted to implications, it is possible to formulate a contraction-free system which easily 
yields the decidability of provability). Since we would like to view intuitionistic logic as a 
subsystem of classical logic, we cannot eliminate the contraction rule from the presentation of 
classical systems. Another important reason is that the contraction rule plays an important role 
in cut elimination. Although it is possible to hide it by dealing with sequents viewed as pairs 
of sets rather than multisets, we prefer to deal with it explicitly. Finally, the contraction rule 
plays a crucial role in linear logic, and in the understanding of the correspondence between 
proofs and computations, in particular strict versus lazy evaluation. 

In order to obtain a system for intuitionistic logic, we restrict the righthand side of a sequent 
to consist of at most one formula. We also modify the (D: left) rule and the (V: right) rule 
which splits into two rules. The (contrac: right) rule disappears, and it is also necessary to add 
a rule of weakening on the right, to mimic the (±-elim) rule. 

Definition 7 The axioms and inference rules of the system ^?' A ' V '~'/or intuitionistic proposi- 
tional logic are given below. 

A,Ft- A 

Fi- 

— — (weakening: right) 

A,A,Fi- A 

(contrac: left) 

A, F i- A 
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A,B,Ft-A Ft- A Ft-B 

(A: left) (A: right) 



AAB,Ft- A Ft- AAB 

A,Fi-A B,Fi-A 

(V: left) 



A V B,Fi- A 

Fi- A Fi- B 

(V: right) (V: right) 



Fi- A\J B Fi- A\J B 

Fi-A B,Fi-A A,Fi-B 

O'.left) — (D: right) 

ri-A A.ri- 

f-i: left) C-i: rigfoj 



In the above rules, A contains at most one formula. If one wants to deal with the extended 
language containing also _L, one simply needs to add the axiom 

j_,ri- a, 

where A contains at most one formula. If we choose the language restricted to formulae over 
A, D, V, and _L, then negation —iA is viewed as an abbreviation for A D_L. Such a system can 
be simplified a little bit if we observe that the axiom _L , F t- A implies that the rule 



is derivable. Indeed, assume that we have the axiom _L, F i- A. If F i-_L is provable, since no 
inference rule applies to _L, the leaf nodes of this proof must be of the form Thus, we 

must have _L e F', in which case F' t- A is an axiom. Thus, we obtain a proof of F t- A. We 
can also prove that the converse almost holds. Since _L, F t-± is an axiom, using the rule 

_L,Ti-_L 



_L,Ti- A 



we see that _L , F t- A is provable. The reason why this is not exactly the converse is that 
_L , r i- is not provable in this system. This suggests to consider sequents of the form F t- A 
where A consists exactly of a single formula. In this case, the axiom _L, F i- A is equivalent 
to the rule 

ri-i 

(_L: right) 

Ft- A 5 

We have the following system. 

Definition 8 The axioms and inference rules of the system g?^^' 1 - f or intuitionistic proposi- 
tional logic are given below. 

A,F*~ A 
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ri-_L 

f_L: right) 



Ft- a 

A,A,Ft- C 
A,Ft-C 



(contrac: left) 



A,B,Ft-C Ft- A Ft-B 

(A: left) (A: right) 



AAB,Ft-C Ft-AAB 

A,Ft-C B,Ft-C 

— 1 fV: left) 

iVB,ri-(7 



ri- a 

Ft-A B,Fi-C 
A D B,rt- c 



(V: right) 
(D: left) 



B 



Ft- AW B 
A,Fi- B 



Ft- AD B 



fV: right) 



There is a close relationship between the natural deduction system.A/p' A ' v '" L and the Gentzen 
system Q?' A ' s/ ' ± . In fact, there is a procedure A/" for translating every proof in g?^^' 1 - into 
a deduction in J\fr > ' A ' s/ ' ± . The procedure A/" has the remarkable property that Af(Fl) is a 
deduction in normal form for every proof IT. Since there are deductions in A^ D ' A ' V ' that are 
not in normal form, the function Af is not surjective. The situation can be repaired by adding 
a new rule to ^?' A ' V '" L , the cut rule. Then, there is a procedure Af mapping every proof in 
(0,a,v,_l t() a deduction j n J\f?' A ' v ' ± j and a procedure Q mapping every deduction in Af?^'^' 1 - 
to a proof in y { 

In order to close the loop, we would need to show that every proof in ^?' A ' V '- L > cut can b e 
transformed into a proof in £?' A ' V ' , that is, a cut-free proof. It is an extremely interesting 
and deep fact that the system ^?' A ' V '- L > cut an( j the system g?'^^' 1 - w& indeed equivalent. 
This fundamental result known as the cut elimination theorem was first proved by Gentzen in 
1935 [3]. The proof actually gives an algorithm for converting a proof with cuts into a cut-free 
proof. The main difficulty is to prove that this algorithm terminates. Gentzen used a fairly 
complex induction measure which was later simplified by Tait [18]. 



The contraction rule plays a crucial role in the proof of this theorem, and it is therefore natural 
to believe that this rule cannot be dispensed with. This is indeed true for the intuitionistic 
system gf^' y ' L (but it can be dispensed with in the classical system £ 1 ? ,A,V, - L ). If we delete 
the contraction rule from the system g?^^' 1 - ( Q r £?' A ' V '~'), certain formulae are no longer 
provable. For example, i- -t— i(P V —iP) is provable in £?' A ' V '~', but it is impossible to build 
a cut-free proof for it without using (contrac: left). Indeed, the only way to build a cut-free 
proof for i- -i— i(P V -tP) without using (contrac: left) is to proceed as follows: 
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i- P V — iP 
-i(i> V -ii>) i 
i- -i-i(P V -iP) 

Since the only rules that could yield a cut-free proof of i- P V — iP are the (V: r/gftf) rules 
and neither i- P nor i- — iP is provable, it is clear that there is no cut-free proof of i- P V — iP. 

However, i- -i— i(P V -iP) is provable in £?' A ' V '~', as shown by the following proof (the 
same example can be worked out in £?' A ' V ' ): 

Example 4.1 

Pi- P 

P i- P V -iP 
P, -i(i> V -ii>) i 
-i(P V -iP) i- -iP 
-i(P V -iP) i- P V -iP 

-■CP v -iP), -i(P v -iP) i- 

{contrac: left) 

-n(P V -iP) i- 

i- -n(.P V -ii>) 



Nevertheless, it is possible to formulate a cut-free system QK,?' A ' V '~ L which is equivalent 
to g?' A ' v ' ± _ Such a system due to Kleene [11] has no contraction rule, and the premise of 
every sequent can be interpreted as a set as opposed to a multiset (Recent results of Lincoln, 
Scedrov, and Shankar [12], show that in the case of propositional intuitionistic logic restricted 
to implications, it is possible to formulate a contraction-free system which easily yields the 
decidability of provability). 

5 Definition of the Transformation M from Q { to Mi 

The purpose of this section is to give a procedure M mapping every proof in g?^'^' 1 - to 
a deduction in Mf > ' A ' v ' ± . The procedure M is defined by induction on the structure of proof 
trees and requires some preliminary definitions. 

Definition 9 A proof tree II with root node T i- C is denoted as 

n 

Vt-C 
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and similarly a deduction V with root node Y t- C is denoted as 

V 
Yt-C 



A proof tree Yl whose last inference is 



is denoted as 



Yi- B 
Ai- D 

Ti- B 
A i- D 



where Yl[ is the immediate subproofofYl whose root is Y i- B, and a proof tree Yl whose last 
inference is 

ri- b ri- c 



At- D 

is denoted as 

ni n 2 
ri- b ri- c 

A i- D 

where II i and YI2 are the immediate subproofs of Yl whose roots are Y 1- B and Y 1- C 
respectively. The same notation applies to deductions. 

Given a proof tree IT with root node Y 1- C , 

Yl 
Yt-C 

J\f yields a deduction N"(YY) of C from the set of assumptions Y + , 

Af(n) 
r + i- c 

where Y + is obtained from the multiset Y. However, one has to exercise some care in defining 
r + so that J\f is indeed a function. This can be achieved as follows. We can assume that we 
have a fixed total order < p on the set of all propositions so that they can be enumerated as 
Pi , P2, . . ., and a fixed total order <„ on the set of all variables so that they can be enumerated 
as x\, x 2 , . . . 
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Definition 10 Given a multiset F - A\, . . . , A n , since {A\, ... , A n } = {P;, , . . . , P; m } where 
Pi { <p Pi 2 <p ■ ■ ■ <p Pi n (where P[ , P 2 , . . ., is the enumeration of all propositions and where 
ij = ij+i is possible since F is a multiset), we define F + as F + = x\ : P;, , . . . , x n : P{ n . 

We will also need the following concepts and notation. 
Definition 1 1 Given a deduction 



the deduction obtained by adding the additional assumptions A to the lefthand side of every 
sequent of V is denoted as A+V, and it is only well defined provided that dom(r') H dom(A) = 0 
for every sequent P 1- A occurring in V. Similarly, given a sequential proof 



we define the proof A + 11 by adding A to the lefthand side of every sequent ofYl, and we define 
the proof H + 0 by adding 0 to the righthand side of every sequent of H. 

We also need a systematic way of renaming the variables in a deduction. 

Definition 1 2 Given a deduction V with root node A 1- C the deduction V obtained from V 
by rectification is defined inductively as follows: 

If V consists of the single node y\ : A\ , . . . , y m : A m 1 C, define the total order < on the 
context A = y\ : A\ , . . . , y m : A m as follows: 



The order < on y\ \ A\, . . . ,y m : A m defines the permutation a such that 

D <?{!)'■ At(I) < Dct{2)'- Ar(2) < • • • < 2/o-(m-l): ^o-(m-l) < 2/o-(m) : Ar(m)- 

Let A' = x\: A^, ... , x m : Aa-^, and define V as A' 1 C. The permutation a induces a 
bijection between {x\, . . . , x n } and {yi, . . . , y n }, namely Xi 1— > y^ay 

IfV is of the form 



V 



n 
r 1- a 




or 



yi:Ai,y 2 :A2,...,y m -A m 1- B 



y 2 :A 2 ,...,y m :A m i- A x d B 
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by induction, we have the rectified deduction 

x l ' ^-cr(l)) • • • ) x j—l '• ^.cr(j-l)) Xj'. A\ , Xj + l '. . . . , X m '. A CT ( m ) I B 

where Xj corresponds to y\ in the bijection between {x\, .. . , x n } and {y\, ... , y n } (in fact, 
j = <t _1 (1) since Ai = A a ^). Then, apply the substitution [x m /xj, Xj/xj+i, ... , x m _i/x m ] 
to the deduction T>[, and form the deduction 

{.Xm I Xj , Xj/xj+\ , ■ ■ ■ , X m — 1 /iE m ] 

x \ '■ . . . , Xj—\ : x m : A[,Xj~. A a -(j + [j, . . . , x m _\ : A CT ( m ) i B 

x l - -<4-cr(l) ) • • • ) x j—l '• ^.cr(j-l)) x j\ . . . , X m -['. A CT ( m ) I— A\ Z> B 

The other inference rules do not modify the lefthand side of sequents, and V is obtained by 
rectifying the immediate subtree(s) ofV. 

Note that for any deduction V with root node y\\ A\, . . . ,y m : A m t- C, the rectified 
deduction V' has for its root node the sequent T + i- C, where T + is obtained from the multiset 
r = A\ , . . . , A m as in Definition 10. 

The procedure J\f is defined by induction on the structure of the proof tree IT. 

• An axiom r, A i- A is mapped to the deduction (T, A) + i- A. 

• A proof IT of the form 

ni 



is mapped to the deduction 



r i- A 



r + i-± 



A proof IT of the form 



ni 

A,A,Fi- B 
A,Fi- B 
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is mapped to a deduction as follows. First map 111 to the deduction J\f(Tl\) 

x: A, y: A, P" i- B 

Next, replace every occurrence of "x: A, y: A" in Af(H\) by "z: A" where z is a new variable 
not occurring in Af(H\), and finally rectify the resulting tree. 



A proof n of the form 



is mapped to the deduction 



ni n 2 
ri- a ri- b 



r + i- a r + i- b 



• A proof II of the form 



III 

A,B,Fi- C 
AhB,Ti-C 



is mapped to a deduction obtained as follows. First, map II i to N(J\\) 

Af(IIi) 
x: A,2/:5,r + i- C 



Next, replace every leaf of the form x: A,y: B,A, r 4 " i- A in A/"(IIi) by the subtree 

z: A A 5,A,r + i- A A B 
z: A A B , A,F + i- A 

and every leaf of the form x: A, y: B, A, F + 1- B in A/"(IIi) by the subtree 

z: A A 5,A,r + i- A A B 
z: A A 5,A,r + i- B 
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where z is new, replace il x:A,y:B" by il z: A A B" in every antecedent of the resulting 
deduction, and rectify this last tree. 



• A proof IT of the form 



is mapped to the deduction 



A,Fi- B 
Ti- A d B 



A/"(TIi) 
x: A,F + i- B 



A proof IT of the form 



rii n 2 

Fi-A B,Fi-C 
A d B,rt-C 



is mapped to a deduction as follows. First map ITi and II2 to deductions J\f(Tl\) 

r + i- a 



and Af(U 2 ) 



AT(n 2 ) 
x:B,r*t- C 



Next, form the deduction V 



z:AD B +Af(Ui) 
z:ADB,Ti-ADB z-.AdB^i-A 
z:AdB,F + i-B 



and modify A/"(ri2) as follows: replace every leaf of the form a;: B, A, T + 1- B by the deduction 
obtained from A + V by replacing il x: B" by "z: A D B" in the lefthand side of every sequent. 
Finally, rectify this last deduction. 
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A proof IT of the form 



is mapped to the deduction 



III 

r i- a 

Fi- A V B 



A/"(IIi) 

r + i- a 



and similarly for the other case of the (V : right) rule. 
• A proof IT of the form 

ni n 2 

A,Fi-C B,Fi-C 

a v B,rt- c 

is mapped to a deduction as follows. First map ITi and II2 to deductions J\f(Tl\) 

x: A,F + t- C 



and A/"(n 2 ) 



AT(n 2 ) 
y.B^t-C 



Next, form the deduction 



Z-.AVB+Afilli) z:A\fB+Af(U 2 ) 
z:A V5,r + i- A W B z: A V B, x: A, T + 1- C z: AW B ,y: B ,T + 1- C 



z:iVB,rhC 



and rectify this last tree. 



This concludes the definition of the procedure Af. Note that the contraction rule can be 
stated in the system of natural deduction as follows: 

x: A,y: A,Fi- B 



z:A,ri- B[z/x,z/y] 
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where z is a new variable. The following remarkable property of M is easily shown. 

Lemma 1 (Gentzen (1935), Prawitz (1965)) For every proof n in g? iAiVi± , Af(U) is a 
deduction in normal form (in Aff > ' A ' v ' ± ). 

Since there are deductions in 1 A/^ D ' A ' V '" L that are not in normal form, the function Kf is not 
surjective. It is interesting to observe that the function Kf is not injective either. What happens 
is that g?'^'^' 1 - is more sequential than Aff > ' A ' v ' ± , in the sense that the order of application 
of inferences is strictly recorded. Hence, two proofs in g?^^' 1 - Q f the same sequent may 
differ for bureaucratic reasons: independent inferences are applied in different orders. In 
Aff > ' A ' v ' ± , these differences disappear. The following example illustrates this point. The 
sequent i- (P A P') D {{Q A Q') D (P A Q)) has the following two sequential proofs 

P,P',Q,Q't-P P,P',Q,Q't-Q 
P,P',Q,Q't- P AQ 
PAP',Q,Q't- PAQ 
P AP',Q AQ'i- P AQ 
P A P' i- (Q A Q') D (P A Q) 
i- (P A P') D («? A Q') D (P A Q)) 

and 

P,P',Q,Q't-P P,P',Q,Q't-Q 
P,P',Q,Q't- P AQ 
P,P',Q AQ'h PAQ 
P AP',Q AQ'h PAQ 
P A P' i- (Q A Q') D (P A Q) 
i- (P A P') D («? A g') D (P A Q)) 

Both proofs are mapped to the deduction 

x: P A P', y: Q A Q' i- P A P' x: P A P' ,y: Q A Q' i- Q A Q' 

x:P A P',y:Q AQ' i- P x: P A P' , y: Q A Q' i- Q 

x:P A P',y:Q AQ' t- P AQ 
x:P A P' i- (Q A Q') D (P AQ) 
i- (P A P') D («? A Q') D (P A Q)) 
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6 Definition of the Transformation Q from Mi to Q { 

We now show that if we add a new rule, the cut rule, to the system ^?' A ' V '" L , then we can 
define a procedure Q mapping every deduction in Mf > ' A ' v ' ± to a proof in ^P' A ' V '- L > cut 

Definition 13 The system £7 i ?' A ' v '- L > cut { s obtained from the system g?^'^' 1 - by adding the 
following rule, known as the cut rule: 

Ft- A A,Tt-C 

(cut) 

Ft-C 



The system £7?> A > V >- L > cut is obtained from £ 1 ? ,A,V, - L by adding the following rule, also known 
as the cut rule: 

Fi-A,A A,Fi-A 

(cut) 



Next, we define the procedure Q mapping every deduction in Mf > ' A ' v ' ± to a proof in 
(0,A,v,_L,cut rj-^g p roce dure Q is defined by induction on the structure of deduction trees 
Given a deduction tree V of C from the assumptions F, 



V 
Ft-C 



Q yields a proof Q(V) of the sequent F i- C 

F~ i— C 



where F is the multiset A\, .. . ,A n obtained from the context F = x±: A\, . . . ,x n : A n by 
erasing x\,.. . ,x n , where x\ , . . . , x n are pairwise distinct. 

• The deduction F,x: At- A is mapped to the axiom T~,At- A. 

• A deduction V of the form 

V x 
jj-_L 
F\- A 



is mapped to the proof 
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G<P X ) 
T- i--L 

r _ i- a 

• A deduction V of the form 

V 1 V 2 

Fi- A ri- B 

Ti-iAB 

is mapped to the proof 

G(Pi) G(V 2 ) 

Y~ i- A r~ i- B 

r~ i- A A B 

• A deduction V of the form 

Tv- A A B 



Y\- A 

is mapped to the proof 



G{V X ) A,B,r~t-A 



r~t-AAB A A B, T~ t- A 

(cut) 



r-t-A 



and similarly for the symmetric rule. 
• A deduction V of the form 



is mapped to the proof 



x: A,Fi- B 
Fi- A d B 



G(V X ) 
a, r - 1- b 

r~ i- A d B 
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• A deduction V of the form 



V x V 2 
ri- A d B Yi- A 

Ti- B 



is mapped to the proof 



Q(V 2 ) 

Q(V{) T- t- A B,T~t-B 

ADB,r~t-B 

(cut) 

r-t- b 



• A deduction V of the form 



is mapped to the proof 



Tt- A 
Tt- A V B 



r~t- a 
r- i- a v B 



and similarly for the symmetric rule. 
• A deduction V of the form 



V x V 2 V 3 

Fi-AVB x:A,Tt-C y:B,Fi-C 



Ft-C 



is mapped to the proof 



G(v 2 ) g(p 3 ) 
Q(v x ) A,r-t-c B,r-t-c 

r-hAvfl AvB,r~t-c 

(cut) 

r-t-c 
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This concludes the definition of the procedure Q. 

For the sake of completeness, we also extend the definition of the function Af which is 
presently defined on the set of sequential proofs of the system g?'^'^'- 1 - to proofs with cuts, 
that is, to proofs in the system j\f?> A > v >- L > cut , A proof IT of the form 

rii n 2 

Fi-A A,Fi-C 
Tt-C 



is mapped to the deduction obtained as follows: First, construct 

A/"(JIi) 



and A/"(n 2 ) 

Af(n 2 ) 

x: A,F + i- c 

Then, replace every leaf x: A, A, T + i- A in Af(Yl2) by A + A/"(ITi), delete "x: A" from the 
antecedent in every sequent, and rectify this last tree. 

7 First-Order Quantifiers 

We extend the systems 1 A/^ D ' A ' V '" L and ^?' A ' V '- L > cut to deal with the quantifiers. 

Definition 14 The axioms and inference rules of the system _/Vr >,A,v,v,3, ~ L for intuitionistic 
first-order logic are listed below: 

T,x: At- A 
F,x:Ai-B 

(D-intro) 



Ti- A d B 

ri- AD B Fi-A 
ri- B 

V i- A Fi- B 

Fi- A A B 



(D-elim) 
(A-intro) 



F i- A A B Fi- AAB 

(A-elim) (A-elim) 

Fi- A Fi-B 
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Ft- A Ft- B 

(W-intro) (W-intro) 



Ft- AW B Ft- AW B 

Fi-AWB r,x:At-C F,y:Bi-C 



Ft-C 

ri- a 



(W-elim) 



(±-elim) 



Fi- A[y/x] Fi-\/xA 

N-intro) (W-elim) 

Fi-MxA ri-i[r/a;] 

where in (W-intro), y does not occur free in F or \/xA; 

Fi- A[t/x] Fi-3xA z: A[y/x],Fi- C 

(3-intro) (3-elim) 

F i 3xA F i- C 

where in (3-elim), y does not occur free in F, 3xA, or C. 
The variable y is called the eigenvariable of the inference. 

Definition 1 5 The axioms and inference rules of the system ^P' A ' V ' V ' 3 '- L > cut j or intuitionistic 
first-order logic are given below. 

A,Tt- A 
Ti-_L 

(±: right) 



Fi- A 

A,A,Ft- C 
A,Ft-C 

Ft- A A,Ft-C 
Ft-C 



(contrac: left) 
(cut) 



A,B,Ft-C Ft-A Ft-B 

(A: left) (A: right) 



AAB,Ft-C Ft-AAB 
A,Fi-C B,Fi-C 



A V B,Ft- C 



(W: left) 



Fi-A Fi-B 

(W: right) (V: right) 



Fi- AW B Fi- AW B 

Fi- A B,Fi-C A,Fi-B 

(D:left) (D: right) 

A D B,Tt- C Fi- A d B 
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A[t x],Fi-C Ti- A[y x] 

1 (Vileft) (V: right) 

\/xA,Ti-C Ti-\/xA 

where in (V: right), y does not occur free in the conclusion; 

A[y/x],Ft-C Fi-A[t/x] 

' (3: left) (3: right) 

3xA,Fi-C Fi-3xA 

where in (3: left), y does not occur free in the conclusion. 
The variable y is called the eigenvariable of the inference. 

The typed A-calculus A _>,x,+,v,3, - L corresponding to ,A/p' A ' v ' ' '~ L is given in the following 
definition. 

Definition 1 6 The typed A-calculus \-^,x,+y,3,±. - s ^ e j[ ne ^ fry the following rules. 

r, x: A > x: A 
F,x:A>M:B 

(abstraction) 
(application) 
(pairing) 



T>(Xx: A. M): A -» B 

F>M:A^B F>N:A 
F>(MN):B 

F> M: A F>N:B 
r > (M, N): Ax B 



F>M:AxB T>M:AxB 

(projection) (projection) 

T>v l (M):A r>7r 2 (M):5 

F> M: A T>M:B 

( injection ) ; ( injection ) 



r> inl(M): A + B T > inr(M): A + B 

F>P:A + B F,x:A>M:C F,y:B>N:C 



or 



T > case(P, Xx: A. M, Xy: B. N): C 

T>P:A + B F,x:A>M:C F,y:B>N:C 
T > (case P of inl(x: A) =>- M \ ±nr(y: B) =>- N): C 

F>M:± 

(±-elim) 
(\f-intro) 



(by -cases) 



(by -cases) 



T> A A (M): A 
F>M: A[u/t] 

r>(\t-.L. My.vtA 
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where u does not occur free in T or \/tA; 

Ti> M:\ftA 



(\/-elim) 



r>Mr:A[T/t] 

r>M:A[r/t] 
r>pair(r, M):3tA 

T>M:3tA F,x: A[u/t]>N:C 



(3-intro) 

(3-elim) 



T> select(M, Xt: i. Xx:A.N):C 
where u does not occur free in T, 3tA, or C. 



In the term (Xt: i. M), the type t stands for the type of individuals. Note that 
r > Xt: i. Xx: A. N : \/t(A — > C). The term Xt: i. Xx: A. N contains the type A which is 
a dependent type, since it usually contains occurrences of t. Observe that (Xt: l. Xx: A. N)t 
reduces to Xx: A[r/t]. N[r/t], in which the type of x is now A[r/t]. The term 
select (M, Xt: i. Xx: A. N) is also denoted as select M of pair(f: i, x: A) =>■ N, 
or even select M of pair(f , x) =>■ N, and the (3-elim) rule as 

F>M:3tA F,x:A[u/t]> N:C 

(3-elim) 



T > (select M of pair(£: l, x: A) ^> N): C 
where u does not occur free in Y, 3tA, or C . 

Such a formalism can be easily generalized to many sorts (base types), if quantified formulae 
are written as Vt: a. A and 3t: a. A, where a is a sort (base type). We also have the following 
reduction rules. 

Definition 1 7 The reduction rules of the system A^'*'" 1 "'^ 3 ' 1 - are listed below: 

(Xx:A.M)N — > M[N/x], 
7r 1 ((M,iV))-^M, 
7r 2 ((M,N))-^ N, 
case(inl(P), M, N) — > MP, or 
case inl(P) of inl(x: A) M \ ±nr(y: B) N — > M[P/x], 

case(inr(P), M, N) — > NP, or 
case inr(P) of inl(x: A) ^> M \ ±nr(y: B) ^> N — > N[P/y], 

A A ^ B (M)N — A B (M), 
7r 1 (A jlXjB (M)) — > A A (M), 
Tr 2 (A AxB (M)) — > A B (M), 
(At:t. M)r — > M[r/f], 
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A ytA (M)r — A A[T/t] (M), 
case(A A+B (P),M,N) — A C (P), 
select(pair(r, P), M) — > (Mt)P, or 
select pair(r, P) of pair(i: l, x: A) ^ N — > N[r/t, P/x], 

select(A 3M (P),M) — > A C (P), 
select(pair(r, P), A Vt( ^ C) (M)) — > A C[r/t] (M), 

A^(A ± (M)) — A^(M). 



A fundamental result about natural deduction is the fact that every proof (term) reduces to a 
normal form, which is unique up to a-renaming. This result was first proved by Prawitz [15] 
for the system ^,a,v,v,3,± 

Theorem 3 (Church-Rosser property, Prawitz (1971)) Reduction in (speci- 
fied in Definition 17) is confluent. Equivalently, conversion in A _>,x,+,v,3, - L is Church-Rosser. 

A proof can be given by adapting the method of Tait and Martin-L6f [13] using a form of 
parallel reduction (see also Stenlund [16]). 

Theorem 4 (Strong normalization property, Prawitz (1971)) Reduction in \^,x,+y,3,± is 
strongly normalizing. 

A proof can be given by adapting Tait's reducibility method [17], [19], as done in Girard [5] 
(1971), [6] (1972) (see also Gallier [2]). 

To obtain the system £ ( P,A,v,v,a,_L,cut Q f classical logic, we add to ^,?' A ' V '- L the cut rule and 
the quantifier rules shown in the next definition. 

Definition 18 The axioms and inference rules of the system ^ ( P,A,v,v,3,_L,cut j Qr c i ass i ca \ 
first-order logic are given below. 

A,Tt-A,A 

A,A,Tt-A Tt-A,A,A 

(contrac: left) (contrac: right) 

A, T i- A Fi-A,A 

ri- a,_l 



Fi-A,A 
Fi-A,A A,Fi-A 



(±: right) 

(cut) 



A,B,Ft-A Ft- A, A Ft-A,B 

(A: left) (A: right) 



AAB,Ft-A Ft-A,AAB 
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A,Ft-A B,Tt-A Fi-A,A,B 

— (V: left) — — (V: right) 

AV5,ri-A ri-A,iV5 

ri-AJ BThA A,Fi-A,B 

' H r 7 O-left) ' D:r« 

A[t/x],T t- A Ft- A, A[y/x] 

' (y:left) ' (V: right) 

\/xA,Fi-A Fi-A,\jxA 

where in (V: right), y does not occur free in the conclusion; 

A[ylxFFi-A Ft- A, A[t/x] 

y/ (3: left) ' 1 (3: right) 

3a;A,ri-A Ti-A,3a;A 

where in (3: left), y does not occur free in the conclusion. 



We now extend the functions J\f and Q to deal with the quantifier rules. The procedure J\f is 
extended to the quantifier rules as follows. 



• A proof IT of the form 

A[t/x],Fi- C 
\/xA,Tt- C 

is mapped to a deduction obtained as follows. First, map 111 to A/"(rii) 

A/"(TIi) 
y:A[T/x],Tt- C 

Next, replace every leaf of the form y: A[t/x], A, F + i- A[t/x] in N"(FLi) by the subtree 

y: \/xA,A,F + i- \fxA 



y: Va;A,A,r + i- A[t/x] 



and rectify this last tree. 
• A proof IT of the form 



ni 

ri- A[y/x] 
Fi- \/xA 
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is mapped to the deduction 



T + i- A[y/x] 

r + 1- \/xA 



A proof IT of the form 



ni 

A[y/x],ri- C 
3xA,Tt- C 



is mapped to the deduction 



u:3xA + M(U.\) 
u: 3xA, T + i- 3xA u: 3xA, v: A[y/x], T + 1 C 

u:3xA,r + i- C 



and rectify this last tree. 
• A proof IT of the form 



ni 

ri- a[t/x] 

Fi- 3xA 



is mapped to the deduction 



r + i- A[t/x] 

T + i- 3xA 

It is easily seen that Lemma 1 generalizes to quantifiers. 

Lemma 2 (Gentzen (1935), Prawitz (1965)) For every proofU in g? A ' y ' y ' 3 '^, A/"(IT) is a 
deduction in normal form (in _/V'?' A ' v ' V ' 3 '- L | 

Next, we extend the procedure Q to deal with the quantifier rules. 
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• A deduction V of the form 



A[y/x] 



is mapped to the proof 



• A deduction V of the form 



ri- \/xA 



r- i- A[y/x] 

r~ i- \/xA 



Ti- \/xA 
Ft- A[t/x] 



is mapped to the proof 

Q(V X ) A[t/x],F- t- A[t/x] 

r~ i- Va;A Va;A, T" i A[t/x] 
(cut) 



• A deduction V of the form 



A[t/x] 



A[t/x] 



is mapped to the proof 



Ti- 3xA 



r~ i- A[r/iB] 
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• A deduction V of the form 

Ft-3xA z: A[y/x],Tt- C 

Tt-C 

is mapped to the proof 

G{V 2 ) 

Q(V X ) A[y/x],F- i- C 

r~i-3xA 3xA,r~ i- C 
(cut) 

r- 1- c 

We now turn to cut elimination. 

8 Gentzen's Cut Elimination Theorem 

As we said earlier before presenting the function Q from 1 A/^ D ' A ' V '" L to ^P' A ' V '- L > cut > ^ j s 
possible to show that the system £?' A ' V ' ' cut is equivalent to the seemingly weaker system 

,-0,A,V,_L 

Si 

We have the following fundamental result. 

Theorem 5 (Cut Elimination Theorem, Gentzen (1935)) There is an algorithm which, 
given any proof 'IT in g^>> A > y > y >^>- L > cut produces a cut-free proof Yl' in ^?' A ' V ' V ' 3 '- L _ There is 
an algorithm which, given any proof Yl in g^> A > y > y ^>- L > cut produces a cut-free proof IV in 

^D,A,V,V,3,_L 

Proof. The proof is quite involved. It consists in pushing up cuts towards the leaves, and in 
breaking cuts involving compound formulae into cuts on smaller subformulae. Full details are 
given for the system CK in Section 1 1 . Interestingly, the need for the contraction rule arises 
when a cut involves an axiom. The typical example is as follows. The proof 

A,Fi-A A,A,Fi-C 
A,Tt- C 

is equivalent to a (contrac: left), and it is eliminated by forming the proof 
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ni 

A,A,Tt- C 

(contrac: left) 

A,rt-c □ 

If we are interested in cut-free proofs, except in classical propositional logic, the contraction 
rules cannot be dispensed with. We already saw in Example 4.1 that —i—\(P V —iP) is 
a proposition which is not provable without contractions in (^?> A > V >~ , _ Another example 
involving quantifiers is the sequent \fx3y(Py A —iPx) t- which is not provable without 
contractions in £?' A ' V ' ' or even in (^.A.v.v.a,-. This sequent has the following proof in 
/-o,A,v,v,a,-i. 



Example 8.1 



Pu, —\Px , Pv i- Pu 
Pu, —iPx , Pv , —iPu I 

Pu, -iPx , (Pv A -nPu) I- 

(Pu A -tPz), (Pv A -iPu) i- 

(Pu A -iPx), 3y(Py A -iPu) i- 

(Pu A -iPk), \fx3y(Py A -iPs) i 

3y(Py A -iPk), Vx3y(Py A -iPs) i 

\fx3y(Py A -iPs), Vx3y(Py A -iPs) i 
(contrac: left) 

\fx3y(Py A -iPs) i- 



It is an interesting exercise to find a deduction of \Jx3y(Py A —iPx) D_L in Af?' A,s/ ' ' ' ± . 

For classical logic, it is possible to show that the contraction rules are only needed to permit 
an unbounded number of applications of the (V: left)-m\e and the (3: right)-m\e. For example, 
the formula 3x\fy(Py D Px) is provable in £,? ,A,V,V,3, - L , but not without the rule (contrac: 
right). The system ^.a.v.v.b.j. can ^ e mo difieci to obtain another system £7/Cp' A ' v ' v ' 3 '~ L in 
which the contraction rules are deleted and the quantifier rules are as follows: 

\/xA, A[r/x],Tt- A Fi-A,A[y/x] 

1 h (V:left) ' 11)1 (V: right) 

Va^Ti-A Ti-A,Va;A 

where in (V: right), y does not occur free in the conclusion; 

A[y/x],F i- A T i- A, 3xA, A[t/x] 

yi (3: left) — —— (3: right) 

3xA,Ti-A Ti-A,3xA S 
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where in (3: left), y does not occur free in the conclusion. 

The above system is inspired from Kleene [11] (see system G3, page 481). Note that 
contraction steps have been incorporated in the (V: left)-mle and the (3: right)-m\e. The 
equivalence of the systems ^.a.v.v.b.j. an( j £^o,a,v,v,3,_l - s s jj 0wn us j n g two lemmas inspired 
from Kleene [11] (1952). Given an inference other than (_L: right), note that the inference 
creates a new occurrence of a formula called the principal formula. 

Lemma 3 Given a proof Yl in (^.A.v.v.a,-. Q j a se q Uent p i- A, for every selected occurrence 
of a formula of the form A A B, A\J B, A D B, —\A, in Y or A, or 3xA, in Y, or \JxA in A, 
there is another proof Yl' whose last inference has the specified occurrence of the formula as 
its principal formula, and uses no more contractions than Yl does. 

Proof. The proof is by induction on the structure of the proof tree. There are a number of 
cases depending on what the last inference is. □ 

Lemma 3 does not hold for an occurrence of a formula \JxA in Y or for a formula 3xA 
in A, because the inference that creates it involves a term r, and moving this inference down 
in the proof may cause a conflict with the side condition on the eigenvariable y involved in 
the rules (V: right) or (3: left). As shown by the following example, Lemma 3 also fails for 
intuitionistic logic. The sequent P, (P D Q), (R D S) t- Q has the following proof: 

P,(RD S)*- P P, (RD S),Q*-Q 

P, (P d Q), (RD S)*-Q 

On the other hand, the following tree is not a proof: 

Pi- P P,Qi- R P,Si- P P,S,Qi-Q 

P,(PdQ)*-R P,(PdQ),S*-Q 
P, (P d Q), (RD S)t-Q 

This shows that in searching for a proof, one has to be careful not to stop after the first 
failure. Since the contraction rule cannot be dispensed with, it is not obvious at all that 
provability of an intuitionistic propositional sequent is a decidable property. In fact, it is, but 
proving it requires a fairly subtle argument. We will present an argument due to Kleene. For 
the time being, we return to classical logic. 

Lemma 4 Given any formula A, any terms t\, T2, any proof Yl in £ ( P> A > V > V > 3 >~' of a sequent 
A[ti/x], A[t2/x], Y i A (resp. of a sequent Y i A, A[t\/x], Afo/x]), either there is a 
proof of the sequent A[t\/x], Y i- A or there is a proof of the sequent Afo/x], Y i A (resp. 
either there is a proof of the sequent Y i- A, A[t\/x], or there is a proof of the sequent 
Y i- A, A[T2/x]). Furthermore, this new proof does not use more contractions than Yl does. 
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Proof. The proof is by induction on the structure of the proof tree. Lemma 3 is used in the 
proof. □ 

We can now prove that in classical logic, the contraction rules are only needed for the 
quantifier-rules. 

Lemma 5 (Contraction elimination) Every proof in £p,A,v,v,3,-i can be transformed to a 
proof in QK^W^. 

Proof. The proof is by lexicographic induction on the pair (m, n), where m is the number 
of contractions in the proof tree IT, and n is the size of IT. We use Lemma 4 when the last 
inference is a contraction, with t\ = T2 = x. Since at least one contraction goes away, we can 
apply the induction hypothesis. □ 

We now present a cut-free system for intuitionistic logic which does not include any explicit 
contraction rule and in which the premise of every sequent can be interpreted as a set. Using 
this system QK{ due to Kleene (see system G3a, page 481, in [11]), we can give a very nice 
proof of the decidability of provability in intuitionistic propositional logic. The idea behind 
this system is to systematically keep a copy of the principal formula in the premise(s) of every 
left-rule. Since Lemma 5 fails for intuitionistic logic, such a system is of interest. 

Definition 19 The axioms and inference rules of the system QK,f' A ' w ' V ' 3 '~ L for intuitionistic 
first-order logic are given below. 

A,Ft- A 

rt-± 

f_L: right) 

Ft- A 5 

A A B, A, B,F i- C Fi-A F i- B 

-^-^ (A: left) (A: right) 

AAB,Fi- C Tt- A A B 

AyB,A,Fi-C AyB,B,Fi-C 



A V B,Ft- C 



(V: left) 



F i- A Fi- B 

(V: right) (V: right) 



Fi- Ay B Fi- Ay B 

ADB,Tt-A AdB,B,Fi-C A,Fi-B 

(D:left) (D: right) 

A D B,Tt- C Fi- AD B 5 

\/xA, A[t/x], F i- C F i- A[y/x] 

1 (Vileft) (V: right) 

\/xA,Fi-C Fi-\/xA 

where in (V: right), y does not occur free in the conclusion; 

3xA, A[y/x],F i- C F i- A[t/x] 

' yi (3: left) (3: right) 

3xA,Fi-C Fi-3xA 5 
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where in (3: left), y does not occur free in the conclusion. 
The variable y is called the eigenvariable of the inference. 

The following lemma shows that QJC?' A ' V ' ' '~ L is equivalent to ^?' A ' V ' V ' 3 '- L ? anc j a i so that 
the premise of every sequent of gfc?^^^' 3 ' 1 - can be viewed as a set. 

Lemma 6 For every sequent Y i- C, every proof Yl in £?> A > V > V > 3 >- L can b e transformed into 
a proof II' ofT i C in gjc?^^^' 3 '- 1 . Furthermore, a proof Yl' can be found such that every 
formula occurring on the left of any sequent in Yl' occurs exactly once. In other words, for 
every sequent Y i- C in Yl', the premise Y can be viewed as a set. 

Proof. The proof is by induction on the structure of IT. The case where the last inference 
(at the root of the tree) is a contraction follows by induction. Otherwise, the sequent to be 
proved is either of the form Y i- D where T is a set, or it is of the form A, A, At- D. The first 
case reduces to the second since Y can be written as A, A, and from a proof of A, A i- D, we 
easily obtain a proof of A, A, A t- D. If the last inference applies to a formula in A or D, the 
induction hypothesis yields the desired result. If the last inference applies to one of the two 
A's, we apply the induction hypothesis and observe that the rules of QKi have been designed to 
automatically contract the two occurrences of A that would normally be created. For example, 
if A = B A C, the induction hypothesis would yield a proof of A, B A C, B, C t- D considered 
as a set, and the (A: left)-mle of QKi yields A, B A C i- D considered as a set. □ 

As a corollary of Lemma 6 we obtain the fact that provability is decidable for intuitionistic 
prepositional logic. Similarly, Lemma 5 implies that provability is decidable for classical 
prepositional logic. 

Theorem 6 It is decidable whether a proposition is provable in J^f?' A ' v '' L . It is decidable 
whether a proposition is provable in £ ( P,A,v,_i_,cut_ 

Proof. By the existence of the functions J\f and Q, there is a proof of a proposition A in 
A/0,a,v,_l iff there is a proof of the sequent i- A in ^P' A ' V '- L > cut gy the cut elimination theorem 
(Theorem 5), there is a proof in £7 i ?' A ' v '- L > cut iff there is a proof in Q[ > ' A ' V ' ± . By Lemma 6, 
there is a proof in g?^'^' 1 - iff there is a proof in QJC?' A ' V '~ L . Call a proof irredundant if 
for every sequent r i- C in this proof, T is a set, and no sequent occurs twice on any path. 
If a proof contains a redundant sequent Y i- C occurring at two locations on a path, it is 
clear that this proof can be shortened by replacing the subproof rooted at the lower (closest 
to the root) location of the repeating sequent r i- C by the smaller subproof rooted at the 
higher location of the sequent Y i- C. Thus, a redundant proof can always be converted to an 
irredundant proof of the same sequent. Since premises of sequents can be viewed as sets and 
we are considering cut-free proofs, only subformulae of the formulae occurring in the original 
sequent to be proved can occur in any proof of that sequent. Therefore, there is a fixed bound 
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on the size of every irredundant proof of a given sequent. Thus, one simply has to search for 
an irredundant proof of the given sequent. 

By the cut elimination theorem (Theorem 5), there is a proof in (^.A.v.-L.cut ^ there is a 
proof in ^,?' A ' V '- L . By Lemma 5, there is a proof in ^,?' A ' V '- L iff there is a proof in QK^'^ ,S/ ' L . 
To conclude, note that every inference of QK^' A ' V,± decreases the total number of connectives 
in the sequent. Thus, given a sequent, there are only finitely many proofs for it. □ 

As an exercise, the reader can show that the proposition 

(CP D Q) D P) D P, 

known as Pierce's law, is not provable in J\fr > ' A ' s/ ' ± , but is provable classically in A/p'^'- 1 . 

The fact that in any cut-free proof (intuitionistic or classical) of a propositional sequent only 
subformulae of the formulae occurring in that sequent can occur in the proof is an important 
property called the subformula property. The subformula property is not preserved by the 
quantifier rules, and this suggests that provability in first-order intuitionistic logic or classical 
logic is undecidable. This can indeed be shown. 

One of the major differences between Gentzen systems for intuitionistic and classical logic 
presented so far, is that in intuitionistic systems, sequents are restricted to have at most one 
formula on the righthand side of i-. This assymetry causes the (D: left) and (V: right) rules of 
intuitionistic logic to be different from their counterpart in classical logic, and in particular, the 
intuitionistic rules cause some loss of information. For instance, the intuitionistic (D : left)-m\& 
is 

Tt-A B,Tt-C 



A d B,Tt- C 

whereas its classical version is 

Tt-A,C B,Tt-C 
A d B,Tt- C 



O- left) 



O- left) 



Note that C is dropped in the left premise of the intuitionistic version of the rule. Similarly, 
the intuitionistic (V: right)-rules are 

T i- A Tt- B 

(V: right) (V: right) 



Tt- AV B Tt- AV B 

whereas the classical version is 



Tt- A,B 
Ti- Ay B 



(V: right) 



Again, either A or B is dropped in the premise of the intuitionistic version of the rule. This 
loss of information is responsible for the fact that in searching for a proof of a sequent in 
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(0,A,v,v,a,_L^ one cannot sto p a f ter having found a deduction tree which is not a proof (i.e. a 
deduction tree in which some leaf is not labeled with an axiom). The rules may have been tried 
in the wrong order, and it is necessary to make sure that all attempts have failed to be sure that 
a sequent is not provable (in fact, this search should be conducted in the system ^/C?' A ' V ' V ' 3 '" L 
to ensure termination in the propositional case). 

Takeuti [20] has made an interesting observation about intuitionistic cut-free sequent calculi, 
but before discussing this observation, we shall briefly discuss some recent results of Lincoln, 
Scedrov, and Shankar [12], about propositional intuitionistic logic based on the connective D. 
The system of Definition 19 restricted to propositions built up only from D is shown below: 



A,Fi- A 

ADB.Tt-A AdB,B,Fi-C A,Fi-B 

— O-left) — 1 (D: right) 

A d B,Tt- C Ft- Ad B 5 

This system is contraction-free, but it is not immediately obvious that provability is decidable, 
since A D B is recopied in the premises of the (D: left)-m\e. First, it is easy to see that we can 
require A in an axiom to be atomic, and to see that we can drop A D B from the right premise 
and obtain an equivalent system. The new rule is 

ADB,rt-A B,Fi-C 

1 1 O- left) 

AdB,Fi-C 

Indeed, if we have a proof of A D B,B,Fi- C, since B, F i- A D B is provable, by a cut we 
obtain that the sequent B, F t- C is provable. Now, the difficulty is to weaken the hypothesis 
A D B in the left premise. What is remarkable is that when A itself is an implication, that is 
when A D B is of the form (A' D B') D B, then ((A' D B') D B) D (B' D B) is provable, 
and B' D B does indeed work. Also, when A is atomic, then it can be shown that recopying 
A D B is redundant. The new system introduced by Lincoln, Scedrov, and Shankar, is the 
following: 



P,Ft- P 

Fi-P B,Fi-C BdC,Fi-AdB C,Fi-D 

1 O-left) O-left) 

PDB,Fi-C (A D B) D C,Tt- D 

A,Fi- B 

O- right) 



Ti- A d B 

where P is atomic. 

The equivalence of this new system and of the previous one is nontrivial. One of the steps 
involved is "depth-reduction". This means that we can restrict ourselves to propositions which 
when viewed as trees have depth at most 2 (thus, such a formula is of the form P, (P D Q), 
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P D (Q D -ff), or (P D Q) D R, where P,Q,Raie atomic). A nice feature of this new system 
is that it yields easily the decidability of provability. Note that under the multiset ordering, 
the complexity of the premises of each rule decreases strictly (we consider the multiset of the 
number of connectives in the formulae occurring in each sequent). For example, (A D B) D C 
is replaced by B D C and A D B, both of (strictly) smaller complexity. 

We now come back to Takeuti's observation [20]. The crucial fact about intuitionistic 
systems is not so much the fact that sequents are restricted so that righthand sides have at 
most one formula, but that the application of the rules (d: right) and (V: right) should be 
restricted so that the righthand side of the conclusion of such a rule consists of a single formula 
(and similarly for (— i: right) if — i is not treated as an abbreviation). The intuitive reason 
is that the rule (d: right) moves some formula from the lefthand side to the righthand side 
of a sequent (and similarly for (— 1: right)), and (V: right) involves a side condition. Now, 
we can view a classical sequent T i- B\ , . . . , B n as the corresponding intuitionistic sequent 
T" i— B\ V ... V B n . With this in mind, we can show the following result. 

Lemma 7 Let g r f?' A ' w ' v ' 3 '- L b e tke system (^.a.v.v^.J- where the application of the rules 
(D: right) and (V: right) is restricted to situations in which the conclusion of the inference is 
a sequent whose righthand side has a single formula. Then, F i- B\ , . . . , B n is provable in 

/->/-rO,A,V,V,3,_L r d w w d • ;; • /0,A,V,V,3,_L 

GT± iff F i- B\ V . . .V B n is provable in 

Proof. The proof is by induction on the structure of proofs. In the case of an axiom 
A, F i- A, A, letting D be the disjunction of the formulae in A, we easily obtain a proof of 

A, F i- D V A in £?' A ' V ' ' '~ L by applications of (V: right) to the axiom A, F i- A. It is also 
necessary to show that a number of intuitionistic sequents are provable. For example, we need 
to show that the following sequents are intuitionistically provable: 

A d B,(AV D)h(B d D)t- D, 

{Ay D) A (B V D) i- (A A B) V D, 
A[t/x] VDh 3xA V D, 

D V _L i- DV A, 
CVCVDi-CVD, 
A V D,—tA i- D. 

Going from gj'r > ' A ' v ' y ' 3 '' L to ^?' A ' V ' V ' 3 '- L > it is much easier to assume that the cut rule can be 
used in Qi, and then use cut elimination. For example, if the last inference is 

Ti-AA 5,ri-A 

( 3 : left) 

letting D be the disjunction of the formulae in A, by the induction hypothesis, we have proofs 
in £?' A ' V ' V ' 3 '- L of r i- A V D and B, F t- D. It is obvious that we also have proofs of A D 

B, Ft- A V D and A D B,Ft- B D D, and thus a proof of A D B, F t- (A V D) A (B D D). 
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Since the sequent A D B, F, (A V D) A (B D D) t- D is provable, using a cut, we obtain that 
A D B, F i- D is provable, as desired. The other cases are similar. □ 

We can also adapt the system gjc?^^^' 3 ' 1 - to form a system gx / Tf' A ' w ' v ' 3 '' L having the 
same property as gT?> A > y > y > 3 > L _ \ n this system, it is also necessary to recopy the principal 
formula of every right-rule on the righthand side. Such a system can be shown to be complete 
w.r.t. Kripke semantics, and can be used to show the existence of a finite counter- model in the 
case of a refutable proposition. This system is given in the next definition. 



Definition 20 The axioms and inference rules of the system gfc'j~f' A ' w ' V ' 3 ' 1 ~ are given below. 

A,Ft-A,A 



Ft- A,_L 

r 7 ~. (±: right) 
Ft- A, A 

A A B, A, B, F t- A Ft-A,A,AAB r i- A, 5, 4 A B 

-^-^ (A: left) — — (A: right) 

AAB,Ft-A Fi-A,AAB 

iV5,4,ri-A A\/B,B,Fi-A F i- A, A, B, A V B 

— — (y.left) -^-^ fV: right) 

A\/B,Fi-A ri-A,4v5 

AdB,Fi-A,A AdB,B,Fi-A A,Fi-A,B,AdB 

— O'.left) — — (D: right) 

AD B, Ft- A J Ft- A, AD B 5 

\/xA, A[t/x], Ft- A Ft- A, A[y/x],\/xA 

' 1 (y:left) ' yi fV: right) 

\/xA,Ft-A Ft-A,\/xA 

where in fV: right), y does not occur free in the conclusion; 

3xA,A[y/x],Ft- A F t- A, A[t/x], 3xA 

' Vyi h (3: left) 1 h (3: right) 

3a;A,ri-A Ti-A,3a;A 

where in (3: left), y does not occur free in the conclusion. 



In the system C/ZCT?'^'^ 3 '" 1 ", the application of the rules (Z>: right) and (V: right) is 
restricted to situations in which the conclusion of the inference is a sequent whose righthand 
side has a single formula. 



We now consider some equivalent Gentzen systems. 
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9 The Gentzen Systems CJ and LK 

Axioms of the form A, F t- A, A are very convenient for searching for proofs backwards, but 
for logical purity, it may be desirable to consider axioms of the form At- A. We can redefine 
axioms to be of this simpler form, but to preserve exactly the same notion of provability, we 
need to add the following rules of weakening (also called thinning). 

Definition 21 The rules of weakening (or thinning) are 

r i- a r i- a 

(weakening: left) (weakening: right) 



A,Ft-A Ft- A, A 

In the case of intuitionistic logic, we require that Abe empty in (weakening: right). 

In view of the previous section, it is easy to see that the quantifier rule 

A[t/x], \fxA, Ft- A Ft- A,3x A, A[t/x] 

1 (y:left) ' 1 (3: right) 

\/xA,Fi-A Fi-A,3xA 

of £/C;? ,A,v,v,3, - L are equivalent to the weaker rules 

A[t/x],Fi-A Fi-A,A[t/x] 

1 (V:/e/if) 1 (3: right) 

VxA,Fi-A Ti-A,3a;A 

of ^ ,A,V,V,3, - L , provided that we add (contrac: left), (contrac: right), (weakening: left) and 
(weakening: right). Similarly, in order to make the (A: left) rule and the (V: right) rule 
analogous to the corresponding introduction rules in natural deduction, we can introduce the 
rules 

A,Fi-A B,Fi-A 

(A: left) (A: left) 

AAB,Fi-A AAB,Fi-A 

and 

Ft- A, A F i- A, B 

(V: right) (V: right) 

ri-A,iV5 ri-A,iV5 

They are equivalent to the old rules provided that we add (contrac: left), (contrac: right), 
(weakening: left) and (weakening: right). This leads us to the systems CJ and LK defined 
and studied by Gentzen [3] (except that Gentzen also had an explicit exchange rule, but we 
assume that we are dealing with multisets). 

Definition 22 The axioms and inference rules of the system CJ for intuitionistic first-order 
logic are given below. 

Axioms: 
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Structural Rules: 

Ft- A 



(weakening: left) (weakening: right) 

r i- a 

(contrac: left) 
(cut) 



A,Ft-A Ft- A 

A,A,rt- A 
A,Ft- A 

Fi-A A,At-& 



Logical Rules: 



r,Ai- © 



A,Ft-A B,Ft-A 



AAB,Ft-A AAB,Ft-A 
F i- A Fi- B 

(A: right) 
(V: left) 



Ft- AAB 

A,Fi-A B,Fi-A 
A V B,Ft- A 



Fi- A Fi- B 

(V: right) (V: ng/tf) 



ri-4v£ ri-Av£ 

r i- a 5,ri-A 

(Dileft) — ■ (D: right) 

A d -B, T i- A J Ft- AD B 



A A,Ft- 

C-i: feft f-i: rcgfe) 



-iA.Ti 

the rules above, A\J B, A A B, A D B, and —\A are called the principal formulae and A, 
B the side formulae of the inference. 

A[r/x],Ft-A Fi- A[y/x] 

1 (Vileft) fV: right) 

VxA,Fi-A Ft-\/xA 

where in (V: right), y does not occur free in the conclusion; 

AhtlxFF^A ri-i[r/a;] 

1 (3: left) (3: right) 

3xA,Tt-A r i- 3xA 

where in (3: left), y does not occur free in the conclusion. 

In the above rules, A and 0 consist of at most one formula. The variable y is called the 
eigenvariable of the inference. The condition that the eigenvariable does not occur free in 
the conclusion of the rule is called the eigenvariable condition. The formula \/xA (or 3xA) 
is called the principal formula of the inference, and the formula A[t/x] (or A[y/x]) the side 
formula of the inference. 



Research Report No. 8 



May 1991 



44 



Jean Gallier 



Definition 23 The axioms and inference rules of the system LK for classical first-order logic 
are given below. 

Axioms: 



Structural Rules: 



r i- a r i- a 

(weakening: left) (weakening: right) 

A, F i- A r i- A, A 

A,A,Fi-A Fi-A,A,A 

(contrac: left) (contrac: right) 

A, F i- A Fi-A,A 

Fi-A,A A,Ai-& 



T,Ai- A,0 



(cut) 



Logical Rules: 



AS i- A 5,ri-A 



AA5,ri-A 4A5,ri-A 
Fi-A,A F i- A, B 

(A: right) 
(V: left) 



F i- A, A A B 
AS^A BS^A 
A V B,r*- A 



r i- a, a r i- a, 5 

(V: n'gftf) (V: ngfe) 



ri-A,iV5 ri-A,iV5 

ri-AJ BJhA Ari-A,^ 
AdB.Ti- A ri-A, AdB 



Ft- A, A A,Ti-A 

C-i: feft C-i: rigfoj 



r i- a ri-A,-iA 

f/ie rw/es above, AV B, A A B, A Z) B, and —<A are called the principal formulae and A, 
B the side formulae of the inference. 

A[t/x],F t- A F i- A, A[y/x] 

1 (V:left) ' y/ (V: right) 

VxA,Fi-A Tt-A,VxA 

where in (V: right), y does not occur free in the conclusion; 

A[y/x],Fi-A Fi-A,A[t/x] 

yi (3: left) — —— (3: right) 

3xA,Fi-A Ti-A,3a;A 5 
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where in (3: left), y does not occur free in the conclusion. 

The variable y is called the eigenvariable of the inference. The condition that the 
eigenvariable does not occur free in the conclusion of the rule is called the eigenvariable 
condition. The formula \fxA (or3xA) is called the principal formula of the inference, and the 
formula A[t/x] (or A[y/x]) the side formula of the inference. 



One will note that the cut rule 

Fi-A,A A,Ai-@ 



(cut) 



r,Ai- a,© 

(with A empty in the intuitionistic case and 0 at most one formula) differs from the cut rule 

Fi-A,A A,Fi-A 

(cut) 



used in £->,A,v,v,3,-.,c«t or in <o,a,v,v,3,-L,c U ^ ^ ^ ^ premises do nQt require the contexts 
r, A to coincide, and the contexts A, 0 to coincide. The rules are equivalent using contraction 
and weakening. Similarly, the other logical rules of CK (resp. CJ) and £?> A > v > v > 3 >~'> cut ( reS p 
gD,A,\/,x/,3,±,cut^ are e q U j va j ent us j n g contraction and weakening. 

1 0 A Proof-Term Calculus for ^> A > V > V > 3 >^«* 

Before we move on to cut elimination in CK, (and CJ), it is worth describing a term calculus 
corresponding to the sequent calculus ^P> A > V > V > 3 >- L > cut a sequent F i- A becomes a judgement 
r* > M: A, such that, if F = A\,...,A n then F* = x\\ A\, . . . , x n : A n is a context in which 
the Xi are distinct variables and M is a proof term. Since the sequent calculus has rules for 
introducing formulae on the left of a sequent as well as on the right of a sequent, we will have 
to create new variables to tag the newly created formulae, and some new term constructors. 

Definition 24 The term calculus associated with ^P> A > V > V > 3 >- L > cut i s defined as follows. 

r, x: A > x: A 
x:A,y:A,F>M:B 



z: A,F> let z be x: A@y: A in M: B 

F>N:A x:A,F>M:C 
F>M[N/x]:C 

F>M:± 



(contrac: left) 
(cut) 



F> A A (M): A 



(weakening: right) 
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x: A,y:B,F> M:C 



z:4A5,r>let z be (x:A,y:B) in M:C 
T> M: A F>N:B 



(A: left) 



F> (M,N): AA B 
x:A,F>M:C y:B,F>N:C 



(A: right) 



z:iVB,r> case z of inl(x: A) M \ inr(y: B)=> N:C 



(V: fe# 



(V: n'g/u) ; (V: rigftfj 



r> inl(M): A V 5 r>inr(M):iV5 

~ 7T 4 — . (D: right) 



z:AD B,T>N[(zM)/x]:C T > (Xx: A. M): A D B 

x:A[r/t],r>M:C F>M:A[u/t] 



z:V*A,r>Af[(zT)/B]:C F > (Xt: l. M):\/tA 

where u does not occur free in T or VtA; 

x:A[u/t],T>M:C 



z:3tA,F> select z of pair(£: i, x: A) M:C 
where u does not occur free in T, 3tA, or C; 

F>M: A[r/t] 



(3: left) 



r>pair(r,M):3L4 



(3: right) 



It is possible to write reduction rules that correspond to cut-elimination steps. For example, 

let (M,N) be (x: A, y: B) in P — > P[M/x, N/y]. 

It is also possible to specify reduction rules imposing a certain strategy, for example, eager or 
lazy evaluation. Such reduction strategies have been considered in this setting by Abramsky [1]. 

The above proof-term assignment has the property that if F > M: A is derivable and T C A, 
then A > M: A is also derivable. This is because the axioms are of the form r, x: A > x: A. We 
can design a term assignment system for an C J"-style system. In such a system, the axioms 
are of the form 

x: A > x: A 

and the proof-term assignment for weakening is as follows: 

F>M:B 

(weakening: left) 



z: A,F> let zhe - in M: B 

Note that the above proof-term assignment has the property that if T > M: A is provable and 
r C A, then A > N: A is also derivable for some N easily obtainable from M. 
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If instead of the above (A: left) rule, we use the two C J -style rules 



A,Ti-C 



(A: left) 



B,Ti- C 



(A: left) 



AhB,Ti-C 



AhB,Ti- C 



then we have the following proof-term assignment: 



x: A,T>M:C 



(A: left) 



z: A A B,F> let z be {x: A,_)inM:C 



y:B,T>M:C 



(A: left) 



z:4A5,r>let z be {-,y:B} in M:C 



It is then natural to write the normalization rules as 



let (M,N) be (x:A,.) in P 
let (M,N) be (-,y:B) in P 



PLM/z], 

prjv/y]. 



We note that in the second case, the reduction is lazy, in the sense that it is unnecessary to 
normalize N (or M) since it is discarded. In the first case, the reduction is generally eager 
since both M and N will have to be normalized, unless x or y do not appear in P. Such 
aspects of lazy or eager evaluation become even more obvious in linear logic, as stressed by 
Abramsky [1]. 

11 Cut Elimination in OC (and CJ) 

The cut elimination theorem also applies to CK and CJ. Historically, this is the version 
of the cut elimination theorem proved by Gentzen [3] (1935). Gentzen's proof was later 
simplified by Tait [18] and Girard [8] (especially the induction measure). The proof given 
here combines ideas from Tait and Girard. The induction measure used is due to Tait [18] (the 
cut-rank), but the explicit transformations are adapted from Girard [8], [4]. We need to define 
the cut-rank of a formula and the logical depth of a proof. 

Definition 25 The degree \ A\ of a formula A is the number of logical connectives in A. Let T 
be an CK-proof. The cut-rank c(T) ofT is defined inductively as follows. IfT is an axiom, then 
c(T) -O.IfT is not an axiom, the last inference has either one or two premises. In the first 
case, the premise of that inference is the root of a subtree T\. In the second case, the left premise 
is the root of a subtree T\, and the right premise is the root of a subtree Ti- If the last inference 
is not a cut, then if it has a single premise, c(T) = c(T"i), else c(T) = max(c(Ti), c^))- If the 
last inference is a cut with cut formula A, then c(T) = maa;({|A| + 1, c{T{), c^)})- We also 
define the logical depth of a proof tree T, denoted as d(T), inductively as follows: d(T) = 0, 
when T is an axiom. If the root of T is a single-premise rule, then if the lowest rule is 
structural, d(T) = d{T\), else d(T) = d{T\) + 1. If the root ofT is a two-premise rule, then 
d(T) = max(d(Ti), d(T 2 )) + 1. 

Research Report No. 8 May 1991 



48 



Jean Gallier 



Thus, for an atomic formula, \A\ = 0. Note that c(T) = 0 iff T is cut free, and that if T 
contains cuts, then c(T) is 1 + the maximum of the degrees of cut formulae in T. We also need 
the definition of the function exp(m, n,p). 

exp(m,0,p) = p; 
exp(m, n+l,p)= m ex P( m ' n 'P\ 



This function grows extremely fast in the argument n. Indeed, exp(m, l,p) = m p , 
exp(m, 2,p) = m mP , and in general, exp(m, n,p) is an iterated stack of exponentials of height 
n, topped with a p: 



exp(m, n,p) = rri 




The main idea is to move the cuts "upward", until one of the two premises involved is an 
axiom. In attempting to design transformations for converting an CK -proof into a cut-free 
CK -proof, we have to deal with the case in which the cut formula A is contracted in some 
premise. A transformation to handle this case is given below. 

Tl-A,A,A 7r 2 

Fi-A,A A, A i-0 

T,Ai- A,0 

Tt-A,A,A A, A i-0 7T 2 

T,Ai-A,0,A A, A i-0 

r,A,Ai- A, 0,0 

T,Ai- A,0 



The symmetric rule in which a contraction takes place in the right subtree is not shown. 
However, there is a problem with this transformation. The problem is that it yields infinite 
reduction sequences. Consider the following two transformation steps: 

Tt-A,C,C C,C, At-® 



Fi-A,C C,Ai-0 

(cut) 

T,Ai- A,0 
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7T 2 

7TJ C,C,At-& 7T 2 

Tt-A,C,C C,Ai-0 C,C,At-& 
T,Ai-A,0,C C,Ai-0 
r,A,Ai- A, 0,0 

T,Ai- A,0 
7T! Ti- A,C,C C,C,At- 0 

ri-A,c,c c,r,Ai-A,0,c 

r,r,A^ a,a,0^c T2 



r, Ai- A, 0, C, C C,C,Ai-0 
T,Ai-A,0,C C,Ai-0 
r,A,Ai- A, 0,0 

T,Ai- A,0 

The pattern with contractions on the left and on the right is repeated. 

One solution is to consider a more powerful kind of cut rule. In the sequel, the multiset 
r, n A denotes the multiset consisting of all occurrences of B ^ A in Y and ofm+n occurrences 
of A where m is the number of occurrences of A in T. 

Definition 26 (Extended cut rule) 

T i- A, mA ni,Ai- 0 
r,Ai- A,0 

where m,n > 0. 



This rule coincides with the standard cut rule when m = n = 1 , and it is immediately verified 
that it can be simulated by an application of the standard cut rule and some applications of 
the contraction rules. Thus, the system £K + obtained from LK by replacing the cut rule by 
the extended cut rule is equivalent to LK. From now on, we will be working with £K + . The 
problem with contraction is then resolved, since we have the following transformation: 

r i- A, (m - l)A, A, A 7,- 2 

r i- A, mA ni,Ai- 0 

T,Ai- A,0 
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7Tl 

A, (m+ I) A 



7T 2 

nA,Av 



0 



r,Ai- a,© 



We now prove the main lemma, for which a set of transformations will be needed. 



Lemma 8 (Reduction Lemma, Tait, Girard) Let 111 be an CK + -proof of T i- A,mA, and 
YI2 an UK? -proof of nA,A 1 0, where m, n > 0, and assume that c(Yl[), c(Yl2) < \A\. 
An CK + -proof Yl ofF, A 1- A, 0 can be constructed, such that c(IT) < \A\. We also have 
d(H) < 2(c?(rii) + c?(IT2)), and if the rules for D are omitted, then d(H) < d(Hi) + c?(ri2). 



Proof. It proceeds by induction on c?(rii) + c?(IT2), where ITi and IT2 are the immediate 
subtrees of the proof tree 

ni n 2 

r 1- A, mA ni,Ai- 0 

T,Ai- A,0 

There are several (non-mutually exclusive) cases depending on the structure of the immediate 
subtrees ITi and II2. 



(1) The root of II 1 and the root of II2 is the conclusion of some logical inference having 
some occurrence of the cut formula A as principal formula. We say that A is active. 

Every transformation comes in two versions. The first version corresponds to the case of an 
application of the standard cut rule. The other version, called the "cross-cuts" version, applies 
when the extended cut rule is involved. 

(i) (A: right) and (A: left) 

TTl 7T2 7T3 

ri-A,5 Ti-A,C 5,Ai-0 

ri-A,5AC 5AC,Ai-0 
T,Ai- A,0 

ri-A,5 B, A i-0 

T,Ai- A,0 



By the hypothesis c(ITi), c(IT2) < \A\, and it is clear that for the new proof IT we have 
c(U) < \A\, since c(IT) = max({\B\ + 1, c(-K]), c(7t 3 )}), \B\ + 1 < \A\ (since A = B A C), 
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c{-k\) < c(TIi), c{-K2) < c(Ili), and c{-k^) < c(IT2). It is also easy to establish the upper bound 
on d(Yl). 

Cross-cuts version. Some obvious simplifications apply when either m = 0 or n = 0, and 
we only show the main case where m, n > 0. Let A-BAC. 

7Ti 7T2 7T3 

T i- A, mA, B T i- A, mA, C B, nA, A i- 0 



r/i- A,(m+ l)A (n+\)A, At-® 

T,Ai- A,0 

Let H[ be the proof tree obtained by applying the induction hypothesis to 

7i"3 

ti-j B,nA,Ai-® 
Fi-A,mA,B (n + l)i,Ai-0 
T, A i- A, &,B 

and IT 2 the proof tree obtained by applying the induction hypothesis to 

r i- A, mA, B r i- A, mA, C k 3 

Fi-A,(m+l)A B,nA,Ai-® 
5,r,Ai- A,0 

n; n 2 
r, a i- a, e,B B,r,At- A,e 

r,r,A,Ai- A,A,0,0 



and finally let IT be 



T,Ai- A,0 

Since c{-k\) < c(Ili), c(7T2) < c(Ili), and c{-kt,) < cfTL;), by the induction hypothesis, 
c(J\' l ),c(J\ 1 ^) < \A\, and it is clear that for the new proof n we have c(TI) < \A\, since 
c(U) = max({\B\ + 1, c^), c(W 2 )}), and \B\ + 1 < \A\ (since A = B A C). It is also easy to 
establish the upper bound on d(Yl). 

(ii) (V: right) and (V: left) 

7Ti 7T2 7T3 

ri-A,^ 5,Ai-0 C,Ai-0 



ri-A,5vC 5vC,Ai-0 
T,Ai- A,0 
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7Tl 

- A,B 



7T 2 

5,Ai- 



0 



T,Ai- A,0 



By the hypothesis c(rTi),c(n2) < \A\, it is clear that for the new proof IT we have 
c(n) < \A\, since c(IT) = max({\B\ + 1, c(7Ti), c(7r 2 )}), |5| + 1 < |A| (since 4 = 5 V C), 
c(tti) < c(rii), c(7T2) < c(ri2), and c(7r3) < c(ri2). It is also easy to establish the upper bound 
on d(U). 

Cross-cuts version: Similar to (i) (Some obvious simplifications apply when either m = 0 
or n- 0). 

(iii) (D: ng/U) and (D: 
Left as an exercise. 

(iv) (— i: right) and (— i: left) 

7Ti 7T2 

A,Fi-A A i-0, A 

Ti-A,-iA -iA,Ai-0 
T,Ai- A,0 

7T2 7Ti 

A i-0, A A,Tt-A 
T,Ai- A,0 



By the hypothesis c(ni),c(Il2) < \~>A\, it is clear that for the new proof IT we have 
c (n) < \—>A\, since c(Yl) = max({\A\ + 1, c(-k\), c(7t 2 )}), c{-k\) < c(Yli), c(7r 2 ) < c(n 2 ). It is 
also easy to establish the upper bound on d(Yl). 

Cross-cuts version (Some obvious simplifications apply when either m = 0 or n = 0). 

7Ti 7T2 

A,Fi- A, m(—iA) n(-ii),Ai- 0, A 



r i- A, (m + l)(—iA) (n + l)(-iA),Ai-0 

T,Ai- A,0 



Let U[ be the proof tree obtained by applying the induction hypothesis to 
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7Tl 

A, Ft- A, m(—iA) 7r 2 



ri- A,(m+ 1)(-iA) n(—iA),Ai- 0, A 

T,Ai- A,0, A 

and ITj the proof tree obtained by applying the induction hypothesis to 

ttj n(-iA),Ai- 0, A 



A, T i- A, m(-iA) (n + l)(-.A),Ai- 0 

A,r,Ai- a,© 

and finally let IT be 

n; n 2 

r, A i- A, 0, A A, T, A i- A, 0 

r,r,A,Ai- A,A,0,0 



T,Ai- A,0 

Since c(iri) < c(Ili), c{-K2) < c(IT2), by the induction hypothesis cCn'j), cCTI^) < l -1 ^.), 
and it is clear that for the new proof n we have c(TI) < |— \A\, since c(TI) = maa;({|A| + 
1 , c(H\), c(H' 2 )}). It is also easy to establish the upper bound on d(H). 



(v) (V: right) and (V: left) 



A,B[y/x] B[t/x],At- 0 



ri-A,ViB5 Va^Ai-© 
T,Ai- A,0 

T!-\[t/x] 7T 2 

ri- a,5[«/k] 5[«/z],Ai-e 

T,Ai- A,0 

In the above, it may be necessary to rename x so that it is distinct from all eigenvariables and 
distinct from all variables in t. 

By the hypothesis c(ni),c(IT2) < \\fxB\, it is clear that for the new proof n we have 
C (ID < \\/xB\, since c(IT) - max({\B[t/x]\ + 1, c(7ri[f/a:]), c(7T2)}), c(7Ti[i/a:]) - c{tt\), 
c(-k\) < c(Ili), and c(7T2) < c(Tl2). It is also easy to establish the upper bound on d(H). 
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Cross-cuts version (Some obvious simplifications apply when either m = 0 or n = 0). 
T i- A, m(VxB), B[y/x] B[t/x],n(\/xB), A i- 0 



r i- A, (m + l)(\JxB) (n+l)(\JxB),Ai- 0 

T,Ai- A,0 

Let H[ be the proof tree obtained by applying the induction hypothesis to 

7ri B[t/x],n(\JxB), At- 0 

ri- A,m(\/xB),B[y/x] (n + l)(\/xB),At- @ 

T,Ai- A,®,B[y/x] 

and H' 2 the proof tree obtained by applying the induction hypothesis to 

ri- A,m(\fxB),B[y/x] ^ 
r i- A, (m + l)(\/xB) B[t/x],n(VxB), Ai- 0 

5[f/a;],r,Ai- A, 0 

and finally let n be 

n[[t/x] W 2 
r,Ai- A,®,B[t/x] B[t/x],F,Ai- A,0 

r,r,A,Ai- A, A, 0,0 



T,Ai- A,0 

In the above, it may be necessary to rename x so that it is distinct from all eigenvariables and 
distinct from all variables in t. 

Since c(7Ti) < c(Ili), andc(7T2) < c(IT2), by the induction hypothesis, cfjl'j), c(Yl' 2 ) < \\/xB\, 
and it is clear that for the new proof IT we have c(Yl) < \VxB\, since c(Yl) = max({\B[t/x]\ + 
1, c(Tl[[t/x]), c(H' 2 )}) and c(H[[t/x]) = c(H[). It is also easy to establish the upper bound on 
dUD. 

(vi) (3: right) and (3: left) 

7Ti 7T2 

Tt-A,B[t/x] B[y/x], At- 0 

T i- A, 32:5 3a;5,Ai-0 
T,Ai- A,0 
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TTl K 2 [t/x] 

Fi- A,B[t/x] B[t/x],At-® 
T,Ai- A,0 

In the above, it may be necessary to rename x so that it is distinct from all eigenvariables and 
distinct from all variables in t. 

By the hypothesis, c(rii),c(ri2) < |3k.B|, and it is clear that for the new proof n we 
have c(Il) < |3k5|, since c(Yl) = max({\B[t/x]\ + 1, c{-k\), cfait/x])}), cfait/x]) = cfa), 
c{-k\) < c(Ili), and c(7r2) < c(J\2). It is also easy to establish the upper bound on d(Yl). 

Cross-cuts version (Some obvious simplifications apply when either m = 0 or n = 0). 
Similar to (v) and left as an exercise. 

(2) Either the root of Hi or the root of IT2 is the conclusion of some logical rule, the cut rule, 
or some structural rule having some occurrence of a formula X ^ A as principal formula. We 
say that A is passive. 

We only show the transformations corresponding to the case where A is passive on the 
left, the case in which it is passive on the right being symmetric. For this case (where A is 
passive on the left), we only show the transformation where the last inference applied to the 
left subtree is a right-rule, the others being symmetric. 

(i) (V: right) 

r 1- A, mi, B 7r 2 
ri-A,raA,5vC nA,Ai-® 

r,Ai- a, 0,5 v c 

7Ti 7T2 

ri-A, mA,B nA,Ai-® 
T, A 1- A, ®,B 
T,Ai- A, 0,5 V C 

Note that c{-k\) < c(ITi) and c(7r2) < c(Il2). We conclude by applying the induction 
hypothesis to the subtree rooted with T, A 1- A, 0, B. It is also easy to establish the upper 
bound on d(Jl). 

(ii) (A: right) 



Research Report No. 8 



May 1991 



56 



Jean Gallier 



7Ti 7T2 

r i- A, mA,B r i- A, mA,C tt 3 

Ti-A,mA,Bf\C ni,Ai- 0 

T,Ai- A, 0,5 A C 

7Tl 7T3 7T2 T3 

ri-A, mA,B nA,Ai-® Ti-A,mA,C nA,Ai- ® 



T, A i- A, 0,5 T,Ai-A,0,C 
r, A i- A, 0,5 A C 

Note that c{-k\) < c(Ili), c(-K2) < c(IIi), and c{-k^) < c(J\2). We conclude by applying the 
induction hypothesis to the subtrees rooted with T, A i- A, 0, B and T, A i- A, 0, C. It is also 
easy to establish the upper bound on d(Yl). 

(iii) (d: right) 
Left as an exercise. 

(iv) (-.: right) 

5, r i- A, mA 7r 2 



T i- A, mA, -i5 nA, A i- 0 

T,Ai- A,0,-i5 

7Ti 7T2 

5,Ti-A, mA nA, Ai-@ 

5,T,Ai- A,0 



T,Ai- A,0,-i5 



Note that c{-k\) < c(Ili), and c(7T2) < c(J\2). We conclude by applying the induction 
hypothesis to the subtree rooted with B, T, A t- A, 0. It is also easy to establish the upper 
bound on d(Yl). 



(v) (V: right) 



7Tl 

Tt- A,mA,B[y/x] W2 
T i- A, mA, \JxB nA, A i- 0 

T,Ai- A,0, \/xB 



May 1991 



Digital PRL 



Constructive Logics. Part I: A Tutorial on Proof Systems and Typed A-Calculi 



57 



=4> 

Fi- A,mA,B[z/x] 

T, At- A,®, B[z/x] 
r, A i- A, 0, \/xB 

In the above, some renaming may be necessary to ensure the eigenvariable condition. 

Note that c(tti[z/x]) = c(tt\), c{-k\) < c(Ili), and c(-K2) < c(IT2). We conclude by applying 
the induction hypothesis to the subtree rooted with T, A i- A, 0, B[z/x]. It is also easy to 
establish the upper bound on d(Yl). 

(vi) (3: right) 

r i- A, mA,B[t/x] 
r i- A, mi, 3xB 

F,At- A,0 

7Ti 7T 2 

ri- A,mA,B[t/x] nA, Ai-Q 

T,Ai- A,@,B[t/x] 
T,Ai- A, 0, 3xB 

Note that c(-ki) < c(Ili), and c(7T2) < c(Tl2). We conclude by applying the induction 
hypothesis to the subtree rooted with T, A i- A, 0, B[t/x]. It is also easy to establish the upper 
bound on d(Yl). 

(vii) (cut) 

7Ti 7T2 

i"i i- Ai,m\A,pB qB,Ai i- ®i,rri2A ^ 

r i- A, mA ni,Ai- 0 

T,Ai- A,0 

where in the above proof ir, mi + = m, F = ri,Ai, and A = Ai,©i. Since by the 
hypothesis, c(ITi),c(n2) < \A\, and c(Ili) = max({\B\ + 1, c(tt{), c(7T2)}), we must have 
\B\ < \A\, c(7ri) < \A\, c(7r 2 ) < \A\, and c(7r 3 ) < \A\. Thus in particular, B ^ A. We show 
the transformation in the case where mi > 0 and m^ > 0, the cases where either mi = 0 or 
77i2 = 0 being special cases. 



7T 2 

nA, A i- 0 



7T 2 

nA, A i- 0 
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Let Yl\ be the result of applying the induction hypothesis to 

i"i i- Ai, pB, m\A nA, At- 0 
ri.Ai- A u ®,pB 

let H' 2 be the result of applying the induction hypothesis to 

qB,A[ t- ©i , 7712^ nA, A t- 0 
g5,Ai,Ai- ©!,© 

and let IT be the proof 

n; n 2 

ri,Ai- A u ®,pB qB, A u At- ©i,0 

r,r,Ai- A,A,0 

T,Ai- A,0 

Since by the induction hypothesis, cCn'^^Cn^) < \A\, and since |5| < \A\, we have 
c(IT) < \A\. It is also easy to establish the upper bound on d(H). 

(viii) (contrac: right) 

r i- A, 5, 5, mi 
ri-A, B,mA nA,Ai- Q 

T, A i- A, 0,5 

r i- A, B , B, mA nA, A i- 0 

T,Ai- A, 0, B, B 
T, A i- A, 0,5 

Note that c{-k\) < c(Ili), and c(7T2) < c(J\2). We conclude by applying the induction 
hypothesis to the subtree rooted with T, A i- A, 0, B, B. It is also easy to establish the upper 
bound on d(Yl). 

(ix) (weakening: right) 
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r i- A, mA 7r 2 



ri-A, mA,B nA,Ai-& 
T, A i- A, 0,5 

r i- A, mA ni,Ai- 0 

T,Ai- A,0 
T, A i- A, 0,5 

Note that c(-k\) < c(ITi), and c(-K2) < c(J\2). We conclude by applying the induction 
hypothesis to the subtrees rooted with T, A i- A, 0. It is also easy to establish the upper bound 
on d(U). 



(3) Either 111 or II2 is an axiom. We consider the case in which the left subtree is an axiom, 
the other case being symmetric. If A £ 0, then 

A i- A ni,Ai- 0 

A,Ai- 0 

ni,Ai- 0 
A, Ah 0 

else 

A i- A ni,Ai- 0, A 

A, A 1- 0, A 

=4> 
Ah A 

A, A 1- 0, A 



Note that c(7r2) < c(Ti2). In the first case, since by hypothesis c(Ili), c(Il2) < \A\, it is clear 
that c(IT) < \A\. The second case is obvious. 



(4) Either the root of Tl\ or the root of IT2 is the conclusion of some thinning or contraction 
resulting in an occurrence of the cut formula A. We consider the case in which this happens in 
the succedent of the left subtree, the other case being symmetric. 



Research Report No. 8 



May 1991 



60 



Jean Gallier 



(i) (weakening: right) 



7Tl 

r I- A 7T2 



Fi-A,A A, A i-0 

T,Ai- A,0 

r i- a 



T,Ai- A,0 



and when m, n > 0, 



7Tl 

r i- A, mi 



7i"2 



Ti-A,(m+1)A nA,Ai-0 
T,Ai- A,0 

r i- A,mi ni,Ai- 0 

T,Ai- A,0 

Since by the hypothesis we have c(Ili), c(J\2) < \A\, it is clear that c(Yl) < \A\ in the first 
case. In the second case, since c(-k\) < c(Jl\) and c(-K2) < c(Yl2), we conclude by applying the 
induction hypothesis. 



(ii) (contrac: right) 

r i- A, (m - \)A, A, A k 2 

r i- A,mi ni,Ai- 0 
T,Ai- A,0 

7Ti 7T2 

ri-A,(m+l)A nA,Ai-& 
T,At- A,0 

Since by the hypothesis we have c(Ili),c(n2) < \A\, and we have c(-k\) < c(Ili) and 
c(tt2) < c(ri2), we conclude by applying the induction hypothesis. 
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The symmetric rule in which a contraction takes place in the right subtree is not shown. □ 

We can now prove the following major result (essentially due to Tait [18], 1968), showing 
not only that every proof can be transformed into a cut-free proof, but also giving an upper 
bound on the size of the resulting cut-free proof. 

Theorem 7 Let T be a proof with cut-rank c(T) of a sequent F i- A A cut-free proof T* for 
r i- A can be constructed such that d{T*) < exp(4, c(T), d{T)). 

Proof. We prove the following claim by induction on the depth of proof trees. 

Claim: Let T be a proof with cut-rank c(T) for a sequent T i- A. If c(T) > 0 then we can 
construct a proof T' for F t- A such that 

c(T') < c(T) and d(T') < 4 d{T) . 



Proof of Claim: If either the last inference of T is not a cut, or it is a cut and c(T) > | A\ + 1, 
we apply the induction hypothesis to the immediate subtrees T"i or T 2 (or T"i) of T. We are left 
with the case in which the last inference is a cut and c(T) = \ A\ + 1. The proof is of the form 

Tj T 2 
r 1- A, mA nA, Ft- A 

r 1- A 

By the induction hypothesis, we can construct a proof T[ for T 1- A, mA and a proof T' 2 
for nA, Ft- A, such that c(T/) < \A\ and d(T() < 4 d{Ti \ for i = 1, 2. Applying the reduction 
lemma (Lemma 8), we obtain a proof T' such that, c(T') < \A\ and d(T') < 2{d{T[) + d(T^)). 
But 

2(d(T[) + diT^)) ^ 2(4^" r '' 1 + 4 d ( r2 )) < ^. max ( d (T0,d(T 2 ))+i _ ^d(T) 

□ 

The proof of Theorem 7 follows by induction on c(T), and by the definition of exp(4, m, n). 

□ 

It is easily verified that the above argument also goes through for the system CJ . Thus, we 
obtain Gentzen's original cut elimination theorem. 

Theorem 8 (Cut Elimination Theorem, Gentzen (1935)) There is an algorithm which, 
given any proof II in CJC produces a cut-free proof IT in CJC. There is an algorithm which, 
given any proof Fl in CJ produces a cut-free proof Fi 1 in CJ. 
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A few more remarks about the role of contraction and weakening will be useful before 
moving on to linear logic. We already noticed with the cut rule that contexts (the T, A occurring 
in the premise(s) of inference rules) can be treated in two different ways: (1) either they are 
merged (which implies that they are identical), or (2) they are concatenated. 

In order to search for proof backwards, it is more convenient to treat contexts in mode (1), 
but this hides some subtleties. For example, the (A: right) rule can be written either as 

Fi-A,A r i- A, B 
r i- A, A A B 

where the contexts are merged, or as 

Fi-A,A A i- 0,5 
T, A i- A, 0, A A B 

where the contexts are just concatenated but not merged. Following Girard, let's call the first 
version additive, and the second version multiplicative. Under contraction and weakening, 
the two versions are equivalent: the first rule can be simulated by the second rule using 
contractions: 

r i- A, A r i- A, B 

r, r i- A, A, A A B 

r i- A, A A B 

and the second rule can be simulated by the first rule using weakenings: 

Fi-A,A A i- 0,5 

T,Ai-A,0,A T, A i- A, 0,5 

T,Ai- A,0, A A B 

Similarly, the (A : left) rules can be written either as 

A,Fi-A 5,Ti-A 
4A5,ri-A AAB,Fi-A 

or as 

A,B,Fi- A 
A A B,Fi- A 

Again, let's call the first version additive, and the second version multiplicative. These 
versions are equivalent under contraction and weakening. The first version can be simulated 
by the second rule using weakening: 
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A,Ti- A 

(weakening: left) 

A,B,Ft-A 
A A B,Fi- A 

and the second version can be simulated by the first rule and contraction: 

A,B,Fi- A 
A A B,B, Ti- A 

A A B,A A B,Fi- A 

(contrac: left) 

A A B,F i- A 

If we take away contraction and weakening, the additive and multiplicative versions are no 
longer equivalent. This suggests, and this path was followed by Girard, to split the connectives 
A and V into two versions: the multiplicative version of A and V, denoted as ® and P , and 
the additive version of A and V, denoted as & and ©. In linear logic, due to Girard [7], 
the connectives A and V are split into multiplicative and additive versions, contraction and 
weakening are dropped, negation denoted A L is involutive, and in order to regain the loss of 
expressiveness due to the absence of contraction and weakening, some new connectives (the 
exponentials ! and ?) are introduced. The main role of these connectives is to have better 
control over contraction and weakening. Thus, at the heart of linear logic lies the notion that 
resources are taken into account. 

1 2 Reductions of Classical to Intuitionistic Logic 

Although there exist formulae that are provable classically but not intuitionistically, there 
are several ways of embedding classical logic into intuitionistic logic. More specifically, there 
are functions * from formulae to formulae such that for every formula A, its translation A* is 
equivalent to A classically, and A is provable classically iff A* is provable intuitionistically. 
Stronger results can be obtained in the propositional case. Since —\—\A D A is provable 
classically but not intuitionistically, whereas A D —r-iA is provable both classically and 
intuitionistically, we can expect that double-negation will play a crucial role, and this is indeed 
the case. One of the crucial properties is that triple negation is equivalent to a single negation. 
This is easily shown as follows: 

At- A 
A,-iA i 

A i- -i-iA 
A, —i—i—i^4 1 
—1—1—1^4. i- -iA 



Research Report No. 8 



May 1991 



64 



Jean Gallier 



Since we also have the following proof 

-iA i- -iA 
—i^4, —1—1^4 1- 

-iA i- —1—1—1^4. 

it is clear that —i—r-\A = —\A is provable intuitionistically. 

The possibility of embedding classical logic into intuitionistic logic is due to four crucial 
facts: 

(1) -i-i-i A = -i A is provable intuitionistically; 

(2) If a formula A is provable classically without using the (V: right)-m\e, then -i— \A is 
provable intuitionistically; 

(3) For a class of formulae for which — i— \A t- A is provable intuitionistically, (2) holds 
unrestricted. This means that if a formula A in this class is provable classically then —i—iA 
is provable intuitionistically; 

(4) For every formula A built only from D, A, — i and V, if A = — i— 1P1 D Pi , . . . , — i— iPfc D Pk 
where P\,...,Pk are all the atoms occurring in A, then A,—r-\A t- A is provable 
intuitionistically. 

The "trick" of the double-negation translation (often attributed to Godel (1933), although 
it was introduced independently by Kolmogorov (1925) and Gentzen (1933)) is that if we 
consider a formula A only built from D, A, — t, V, and replace every atomic subformula P by 
-i— iP obtaining A* , we get a subclass of formulae for which (4) holds without the A, and thus 
(3) also holds. For this class, A is provable classically iff A^ is provable intuitionistically. 

Our first result will concern propositions. Given T = A\,...,A m , we let — i — ir = 
-i-iAi,...,-i-iA m . 

Lemma 9 Given a sequent Y i- B\ , . . . , B n of propositions, ifY i B\, . . . , B n is provable in 
£?> A > V ^, then — i— .r i- -.(-.Pi A ... A -iB n ) is provable in <7? ,A,V, ~'. 

Proof. We proceed by induction on proofs. In fact, it is easier to work in g^>< A < v <^< cut 
and use cut elimination. It is necessary to prove that a number of propositions are provable 
intuitionistically. First, observe that if A\,...,A m i- B is provable in g^>< A < v <^< cut ^ th en 
—i—iAi,...,—i—iA m i- —i—iB is also provable in g^>< A < v <^< cut _ j^q following sequents are 
provable in ^.A.v.^cut. 

-r-iA i -.(— iA A D), 
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-i(—iA A D), A D) t- A B) A D), 

-1-1A, -r-iB i- — i— i(A A B), 
-\(->A A —iB A -D) i- V 5) A 

— i— iA V i- — i— i(A V B), 

(-.-.A D A D)) i- -<(-.(A D B) A D), 

— t— i(A D B), iA A D), D -i-D) •- -iX>, 

(■nA D -i-D) i- i—i^4 A Z>), 
— 1(— iA A D), —1—1—1^4. i- -iD, 
-.(— iA A -.A A D) i- -t(— .A A D). 

We now consider the axioms and each inference rule. Given A = B\, . . . , B n , we let 
D = -i5i A ... A ->B n . This way, observe that — 1(— iA A -lBi A ... A -i.B n ) = — 1(— iA A D). 
An axiom T, A i- A, A becomes — i — >r, —mA i iA A .D), which is provable in ^?' A ' v '~ , ' cut 
since —\—\A t- —\(—iA A .D) is. Let us also consider the case of the (D: r/g/iO-rule, leaving the 
others as exercises. 

r, a i- 5, a 



r i- A D -B, A 

By the induction hypothesis, — i — >r, —r-iA i- 15 A .D) is provable in ^P' A ' v '~ , ' cut ; an( j so j s 

-n^r i- (-i-i A D -i(-i.B A D)). 

Since 

(-i-i A D A D)) i- D B) A D) 

is also provable in ^?' A ' v '~ , ' cut ) by a cut? we obtain that 



is provable in g^>< A < v <^< cut > as desired. □ 



Since — t — i — = —<A is provable intuitionistically, we obtain the following lemma known 
as Glivenko's Lemma. 

Lemma 10 (Glivenko, 1929) Given a sequent— \F, At- —iBi, ... ,—iB n made of propositions, 
if —\Y, A i- —iB\ , . . . , —iB n is provable in £,? ,A,V, ~', then —iT, — i — iA i- — \(B\ A ... A B n ) is 
provable in (^?> A > V >~' j n particular, if —\T i —iB is a propositional sequent provable in 
G^' A ' V '~', then it is also provable in £?> A > V >~'. 

Proof. By Lemma 9, using the fact that —\—r-\A = —iA is provable intuitionistically, and 
that the sequent 

-i(-i-i5i A ... A -i-i5 n ) i- -i(5i A ... A B n ) 
is provable in £?> A > V >^. □ 
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As a consequence of Lemma 9, if a proposition A is provable classically, then —r-iA is 
provable intuitionistically, and as a consequence of Lemma 10, if a proposition —\A is provable 
classically, then it is also provable intuitionistically. It should be noted that Lemma 9 fails 
for quantified formulae. For example, \fx(P(x) V —iP(x)) is provable classically, but we 
can show that —i—i\/x(P(x) V —\P(x)) is not provable intuitionistically, for instance using the 
system of Lemma 6. Similarly, \/x—r-iP(x) D -i— \\/xP(x) is provable classically, but it is 
not provable intuitionistically, and neither is -n(Vz-nP(z) D -i— \\/xP(x)). As observed by 
Godel, Lemma 10 has the following remarkable corollary. 

Lemma 1 1 (Godel, 1933) For every proposition A built only from hand- 1, if A is provable 
classically then A is also provable intuitionistically. 

Proof. By induction on A. If A = —iB, then this follows by Glivenko's Lemma. Otherwise, 
it must be possible to write A - By A ... A B n where each B{ is not a conjunct and where each 
Bi is provable classically. Thus, each B{ must be of the form — iCj, since if B{ is an atom it is 
not provable. Again, each B{ is provable intuitionistically by Glivenko's Lemma, and thus so 
is A. □ 

Lemma 9 indicates that double-negation plays an important role in linking classical logic 
to intuitionistic logic. The following lemma shows that double-negation distributes over the 
connectives A and D. 

Lemma 1 2 The following formulae are provable in £?> A > V >~ , ; 



— i— i(A A B) = — i— iA A 

-r-i(A D B) = -riA D -r-iB. 



Proof. We give a proof for 



-r-i(A D B) i- -r-iA D 



leaving the others as exercises. 



A,B i- B 



A,-<Bi-A A,B,-<Bi- 



A,AD B,-<B i- 



A,-<B i- -<(A D B) 



A,-r-i(A D B),-iB i 
— t— .(A D 5), -i5 i- -.A 



— i— i(A D 5), -i-i A, -.5 i 



— t— .(A D 5), — i— iA i- -r-,B 



iA D B)i- -r-tA D -mB 



□ 
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Lemma 12 fails for disjunctions. For example, 

-r-iP V -iP) i- (-1-1P V -1-1-1P) 

is not provable in £?' A ' V '~', since — i— i(P V— P) is provable but (— i— iP V — i— i— iP) is not provable 
in g?' A ' v '^ (this is easily shown using the system QKi). Lemma 12 also fails for the quantifiers. 
For example, using the system of Lemma 6, we can show that Vx—i—iP(x) D —i—i\/xP(x) and 
—i—i3xP(x) D 3x—\—tP(x) are not provable intuitionistically. 

Even though Lemma 9 fails in general, in particular for universal formulae, Kleene has made 
the remarkable observation that the culprit is precisely the (V: right)-m\e [11] (see Theorem 
59, page 492). Indeed, the lemma still holds for arbitrary sequents T i- By,.. . , B n , provided 
that their proofs in (^.a.v.-i.v.b ^ q not use m ^ e (y. r ight). 

Lemma 1 3 Given a first-order sequent T t- Bi , . . . , B n , ifVi- B\ , . . . , B n is provable in 
£.p,A,v,-.,v,a w it nou t using the rule (V: right), then —i—iF i — 1(— \B\ A ... A — \B n ) is provable 

■ /0,A,V,-i,V,3 

Proof. As in the proof of Lemma 9, we proceed by induction on proofs. It is necessary to 
prove that the following sequents are provable in (^?> A > V >~ , > V > 3 : 

-i(-iA[t/x] AD) i- -i(r-3xA A D), 
Vx(-r->A D -iD),-<-axAt- -iD, 
(-r-tAlt/x] D —iD), —r-MxA i- —iD. 

where x does not occur in D in the second sequent. Proofs for the above sequents follow: 



A[t/x], D i- A[t/x] 
A[t/x],D i- 3xA 
A[t/x],-BxA,Di- 

—BxA, D i- —iA[t/x] —\3xA, D \- D 

—3xA, D i- -<A[t/x] A D 
-i(->A[t/x] A D), —BxA, D i 
-i(->A[t/x] A D), -i3kA ADh 
-i(-iA[t/x] AD) i- -i(-axA A D) 
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D,A[y/x]i- A[y/x] 

D,A\y/x],^A\y/x]t- D,A[y/x]*-D 

D,A[y/x] t -^A[y/x] -nD, D, A[y/x] t- 

-rnA\y/x] D ^D,D,A\y/x]t- 
Vx(-r-,A D -iD), D, A[y/x] i 
Vz(-i-iA D -i-D), Z>, azA i 
Vz(-r-iA D -i-D), D i- -dzA 
Vz(-.-.A D -i-D), -i-i3kA, Z> i 

Vk(-i-.A D -i-D), -r-azA I- -iZ> 

where x does not occur in D, and y is a new variable. 
D,A[t/x] i- A[i/a:] 

D, A[t/x],—iA[t/x] i- Z>, A[i/a:] i- D 

D,A[t/x]t- ->-iA[t/x] ->D,D,A[t/x]t- 
(-<-iA[t/x] D ->D), Z>, A[i/a:] i- 
D -iD),D,VbAi- 
D -i-D), £> ' -iVasA 
(— .— D -lD), -i-iVzA, Z> i- 
D -i-D), -r-MxA i- -iD 

We now have to consider the cases where the last inference is one of (V: left), (3: fe/f), or 
(3: right). We treat the case of the rule (3: right), leaving the others as exercises. 

Ti- A[t/x],A 
Ti- 3xA,A 

Given A = B\,...,B n , we let D = —iB\ A ... A —iB n . By the induction hypothesis, 
—i—iF i- —\(—\A[t/x] A .D) is provable in £?> A > V >~'> V > 3 , On the other hand, since the sequent 

A[t/x] AD) i- -i-BxA A D) 

is provable in (^?> A > V >~'> V > 3 ) using a cut, we obtain that the sequent 

— t— ir i- —\{—BxA A Z>) 

is provable in ^?' A ' V ' - '' ' , as desired. □ 
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Technically, the problem with Lemma 13, is that the sequent 

Vx-i(-iA AD) i- -.(-.VzA A D) 

(where x does not occur in D) is not provable in g?> A > v >^> y > 3 _ i n order to see where the 
problem really lies, we attempt to construct a proof of this sequent. 

-n(-nA[y/x]AD),Di- A[y/x] 
Vk-.(-.A AD),Dt- A[y/x] 
\/x—\(—\A A D), D i- \JxA 
\fx-i(-iA A D), -MxA, D i 
Vz-i(-.A A D), -MxA Aflh 
Vx-i(-iA AD) i- -i(-iVkA A Z>) 

where a; does not occur in D, and j/ is a new variable. The problem is that we cannot 
apply the (V: left)-wle before —\\fxA has been transferred to the righthand side of the 
sequent (as \fxA) and before the (V: right)-mle has been applied to \JxA, since this 
would violate the eigenvariable condition. Unfortunately, we are stuck with the sequent 
— 1(— \A[y/x] A D), D t- A[y/x] which is unprovable in (^?> A > V >~ , > V > 3 However, note that the 
sequent— \(—\A[y/x] A D), D t- —i—iA[y/x] in which A [y/ x] has been replaced with —i—iA[y/x] 

ui ■ /0,A,V,-i,V,3 

is provable in y { : 

D,-,A\y/x]t--,A\y/x] D,-\A[y/x] i- D 

D,-iA[y/x] i- -iA[y/x] A D 
-n(-nA[y/x]AD),D,^A[y/x] t - 
-n(^A[y/x] A D), D i— -nAly/x] 

Thus, if the sequent —r-iA t- A was provable in ^?' A ' V ' _, ' V ' 3 ; the sequent 

Vx-i(-iA AD) i- -.(-iVkA A D) 

would also be provable in (^?> A > V >~ , > V > 3 it i s therefore important to identify a subclass of 
first-order formulae for which —\—\A t- A is provable in £?> A > V >~'> V > 3 > since for such a class, 
Lemma 13 holds without restrictions. The following lemma showing the importance of the 
axiom -i— \P i- P where P is atomic, leads us to such a class of formulae. It is at the heart of 
the many so-called "double-negation translations". 

Lemma 14 For every formula Abuilt only fromD, A,- 1, V, the sequent —r-\At- Aisprovable 
in the system ^ l ?' A '~'' V obtained from £?> A >~'> V by adding all sequents of the form —r-iP i P 
where P is atomic as axioms. Equivalently, if A - — i— \P\ D Pi , . . . , — i— iP*. D P*. where 
P\ , . . . , Pk are all the atoms occurring in A, then A, — i— \A i A is provable in £?> A >~'> V ' _ 
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Proof. It proceeds by induction on the structure of A. If A is an atom P, this is obvious 
since — i— \P i- P is an axiom. If A = B A C , by the induction hypothesis, both — i— 15 i- 5 
and — i— iC i- C are provable in £ l ?' A '~'' V , and so is — i — iC A — i— iC i- B A C We just have 
to prove that — i— i(A A 5) i- — i— iA A —r-iB is provable in £7?' A ' _, ' V , which is easily done. If 
A = —iB, since we have shown that —i—i—iB i — 15 is provable in £?' A '~'' V , so is —r-iA i A. If 
A - B D C, then by the induction hypothesis, — i— iC i- C is provable in £7 l ?' A ' _, ' v (and so is 
-i-i 5 i- B, but we won't need it). Observe that the sequent — i — tC D C,— i— \{B D C) i- 5 D C 
is provable in £?' A ' - '' : 



Bt- B 



B,Ct- C 



B,(B d C)i- C 
B,-iC,(B DC)t- 
5,-iCi- D C) 
D C),B,-iCt- 



i(B dC),B\ 



i(5 DC),B,Ct-C 



-iC d C, -i-i(5 D C), B \- C 
sC d C, -i-i(5 D C) i- 5 D C 



Using the fact that — i— iC i- C is provable in £7 l ?' A ' _, ' v and a suitable cut, -i— 1(5 D C) i- 
5 D C is provable in ^ l ?' A '~'' . If A = Va;5, we can show easily that —\—\VxB t- —\—\B[t/x] is 
provable in £?> A >~'> V _ Since by the induction hypothesis, — i— 15 i- 5 is provable in £ l ?' A '~'' , for 
any new variable y, —i—iB[y/x] i- B[y/x] is also provable in £ l ?' A '~'' V , and thus by choosing 
t = y, the sequent —\—\\/xB i- 5[y/a;] is provable where y is new, so that —\—\\fxB i- Va;5 is 
provable in ^ l ?' A '~'' V . □ 

In order to appreciate the value of Lemma 14, the reader should find a direct proof of 
— i — 1( — i — i-P D P) in £?' A '~ , ' V . Unfortunately, Lemma IA fails for disjunctions and existential 
quantifiers. For example, 

-i-iP D Pi- -i-i(P V -iP) D (P V -iP) 

is not provable in £?> A > V >~'> V > 3 _ This can be shown as follows. Since P V — iP is provable 
in £?> A > V >- , > V > 3 , by Lemma 9, -.-.(P V -iP) is provable in g^>^^ B _ T h us , -,-,P D P i- 
(P V — iP) would be provable in £?> A > V >~'> V > 3 ? but we can show using the system of Lemma 6 
that this is not so. 



The sequent 

-i-iP D P i- -i-i(-i-i3a;P(a;) D 3k-t-iP(k)) D (-t-i3kP(k) D 3k-.-.P(k)) 

is also not provable in g?< A < y <~^< y <^ _ This is because (— i— i3a:P(a:) D 3a;— i— iP(a;)) is provable 
in C^.A.v.-i.v.a without using the (V: right)-m\e, and so, by Lemma 13, —r-\(—r-3xP(x) D 
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3a;-i-iP(a;)) is provable in £?> A > V >~'> V > 3 . Then, 

-i-iP D P i- (-t-i3kP(k) D 3i-nP(i)) 

would be provable in ^?' A ' V ' _, ' V ' 3 ; but we can show using the system of Lemma 6 that this is 
not so. 

Since the sequent A V —\A t- —\—\A D A is easily shown to be provable in £?> A > V >~'> V > 3 > 
Lemma 14 also holds with the axioms i- P V -iP substituted for —i—iP t- P (for all atoms P). 
In fact, with such axioms, we can even show that Lemma 14 holds for disjunctions (but not for 
existential formulae). 

In view of Lemma 14 we can define the following function t on formulae built from 
D,A,-.,V: 

A* = -i-i A, if A is atomic, 
(^4) f = ^A\ 
(A * P)* = (A^ * 5*), if * e {D,A}, 
(VzA) 1 = VzA 1 . 

Given a formula built only from D, A, — i, V, the function t simply replaces every atom P by 
-i— iP. It is easy to show that A and are classically equivalent. The following lemma shows 
the significance of this function. 

Lemma 15 For every formula A built only from D,A,— i, V, the sequent —r-\A^ ■ A* w 
provable in the system £?' A '~'' V . 

Proof. Since — n— iA = — iA is provable in £?' A ' _, ' V , the sequent — i— i— i— iP = — i— iP is 
provable in £?' A ' - '' for every atom P, and thus the result follows from the definition of 
and Lemma 14. □ 

Actually, we can state a slightly more general version of Lemma 15, based on the observation 
that— i—i— \A = —iA is provable in (??' A ' _, ' V . 

Lemma 16 For every formula A built only from D, A,— i, V and where every atomic sub- 
formula occurs negated (except ±), the sequent — i— \A^ i A* w provable in the system 

/O, A,-i, V 



The formulae of the kind mentioned in Lemma 16 are called negative formulae. The follow- 
ing lemma shows that if we use double-negation, then V and 3 are definable intuitionistically 
from the connectives A, -i, V. 
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Lemma 1 7 The following formulae are provable in (??' A ' _, ' V : 

-r-iA V B) = — 1(— iA A -,B) 
— i— 3xA = — iVa;— iA. 

Proof. We give a proof of the sequent —r-3xA t- —\\/x—\A, leaving the others as exercises. 

A[y/x] i- A[y/x] 
-^A[y/x],A[y/x]t- 

Vx-iA, A[y/x] i- 
Va:— \A, 3xA i 

Va:— \A i — \3xA 

— i— \3xA, Va:— \A i 
— i— \3xA i — iVa;— iA 

where y is a new variable. □ 

We are now ready to prove the main lemma about the double-negation translation. The 
correctness of many embeddings of classical logic into intuitionistic logic follows from this 
lemma, including those due to Kolmogorov, Godel, and Gentzen. 

Lemma 1 8 Let T i- B\,...,B n be any first-order sequent containing formulae made only 
from D,A,— i, and V. If T i- B\, . . . , B n is provable in C^.a.v.-i.v.b tnen ^ translation 
I"* i —i(—iB\ A ... A is provable in £?' A '~'' V . In particular, if B is provable in 

0D,a,v,-,,v,3 then B i is provab ie in g? tA ^. 

Proof. First, we prove that if T i— B\,...,B n is provable in C^.a.v.-i.v^ then i- 
i? j , . . . , is also provable in (^.A.v.-i.v.a This is done by a simple induction on proofs. 
Next, we prove that — i — >r+ 1- -t(— \B\ A ... A —iB^) is provable in g?> A >^> y _ The only obstacle 
to Lemma 13 is the use of the (V: right)-m\e. However, we have seen in the discussion 
following Lemma 13 that the problem is overcome for formulae such that —r-\A t- A is 
provable in £?' A,_, ' V . But this is the case by Lemma 15 (which itself is a direct consequence 
of Lemma 14), since we are now considering formulae of the form A* . Since B t- —i—iB is 
provable in (^?> A >~'> V f or an y B , using cuts on the premises in — i — rr^, we obtain a proof of 
rt i- -i(-i-0j A ... A -itft ) i n £0,a,^,v_ jji the special 

case where n = 1 and F is empty, we 
have shown that i- — i— \B^ is provable in Q[ > ' A '~'' , and using Lemma 15, we obtain that is 
provable in £?' A '~'' V . □ 

It is trivial that the converse of Lemma 18 holds (since £?> A > _, > V i s a subsystem of 
^i>,a,v,-.,v,3^ ^ s a coj-oiiaj-y 0 f Lemma 18, observe that for negative formulae (defined in 
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Lemma 16), A is provable in £,?' A '~'' V iff A is provable in £?' A '~'' V . This is because for a 
negative formula A, all atoms appears negated, and thus A = A^ is provable in £?' A '~'' . 

We now define several translations of classical logic into intuitionistic logic. 
Definition 27 The function ° (due to Gentzen) is defined as follows: 



A 0 


= —i—i.A, if A is atomic, 


(-,A)° 


= ^A°, 


(A A Bf 


= (A° A B°), 


(A d Bf 


= (A 0 d B°), 


(A V Bf 


= A -iB 0 ), 


(\fxAf 


= \/xA°, 


(3xAf 


= -iVx-iA 0 . 



The function * (due to Godel) is defined as follows: 



A* 


= — i— \A, if A is atomic, 


(-nA)* 


= ^A*, 


(A A Bf 


= (A* A B*), 


(A d Bf 


= -^(A* A 


(A V Bf 


= A 


(\fxAf 


= VzA*, 


(3 x Af 


= -iViB-iA*. 



The function K (due to Kolmogorov) is defined as follows: 

A K = — i— \A, if A is atomic, 
(-nAf = -nA K , 
(A A Bf = -i-i(4 K A B K ), 
(A d 5) K = -i-i(4 K d 5 K ), 
(4 V 5f = -i-i(4 K V 5 K ), 
(VicA)" = ->-MxA K , 
(BzAf = -i-iBxA' 1 . 

By Lemma 17 and Lemma 14, it is easy to show that for any sequent T t- B\ , . . . , B n , the 
sequent 

r°i--,(-,5 1 0 A...A-.5°) 

is provable in (7?> A ' -1 > V iff 

T* i- -iC-i-B? A ... A -iB*) 
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is provable iff 

T K i- A ... A ^B*) 

is provable. Furthermore, it is easily shown that A = A°, A = A*, and A = A K , are 
provable classically. 

Theorem 9 For any sequent F i- B\ , . . . , B n , ifY i- Bi , . . . , B n is provable in £,?' A ' V '~ , ' V ' 3 , 
then the sequents T° i — ■(— A ... A ->B°), V* i — 1(— i^B^ A ... A -iB*), and T K i 
-t(— i-Bf A ... A —iB%), are provable in ^?' A '~'' V . In particular, if A is provable in ^ ,A,V, ~ ,,V,3 ) 
then A°, A*, and A K , are provable in £?' A '~'' . 

Proof. We simply have to observe that the translation 0 is in fact the composition of two 
functions: the first one * is defined as in Definition 27, except that atoms remain unchanged, 
and the second function is just t. This translation has the property that A' only contains the 
connectives D, A, — i, and V. Furthermore, it is easily shown that T i- B\, . . . , B n is provable 
in £p>A,v,-,,v,3 iff r # i- 5', . . . , 5* is. Therefore, Lemma 18 applies to T* i- B',.. . , 
and we obtain the desired result. □ 

It is trivial that the converse of Theorem 9 holds. 

We shall now discuss another translation of classical logic into intuitionistic logic due to 
Girard [9]. Girard has pointed out that the usual double-negation translations have some rather 
undesirable properties: 

(1) They are not compatible with substitution. Indeed, the translation A[B / P]* of A[B / P] 
is not equal to A*[B* / P] in general, due to the application of double negations to atoms. 

(2) Negation is not involutive. For instance, A[B / P]* and A*[B* / P] are related through 
the erasing of certain double negations (passing from -i— t— \P to —iP), but this erasing is not 
harmless. 

(3) Disjunction is not associative. For example, if A V B is translated as — 1(— \A A — \B), 
then (A V B) V C is translated as — 1( — 1( — 1( — A ->B)) A -iC), and A V (B V C) is translated as 
-i(-iA A -n(^B A -iC))). 

Girard has discovered a translation which does not suffer from these defects, and this 
translation also turns out to be quite economical in the number of negation signs introduced [9]. 
The main idea is assign a sign or polarity (+ or -) to every formula. Roughly speaking, a 
positive literal P (where P is an atom) is a formula of polarity +, a negative literal — \P is 
a formula of polarity — , and to determine the polarity of a compound formula, we combine 
its polarities as if they were truth values, except that + corresponds to false, - corresponds 
to true, existential formulae are always positive, and universal formulae are always negative. 
Given a sequent T i- A, the idea is that right-rules have to be converted to left-rules, and in 
order to do this we need to move formulae in A to the lefthand side of the sequent. The new 
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twist is that formulae in A will be treated differently according to their polarity. Every formula 
A of polarity — in A is in fact of the form — \B, and it will be transferred to the lefthand side as 
B (and not as -i-i-B), and every formula A of polarity + in A will be transferred to the lefthand 
side as —iA. The translation is then completely determined if we add the obvious requirement 
that the translation of a classically provable sequent should be intuitionistically provable. Let 
us consider some typical cases. 

Case 1 . The last inference is 

Ti- -iC,-iD 

r i- — iC v —iD 

where C and D are positive. The sequent F i- —iC, —>D is translated as T, C, D i-, and we 
have the inference 

r, c a d i- 

It is thus natural to translate —\C V —\D as —\(C A D), since then C A D will be placed on the 
lefthand side (because —\(C A D) is negative). 

Case 2. The last inference is 

Ti-C,D 

where C and D are positive. The sequent T i- C, D is translated as T, -iC, -i-D i-, and we 
have the inference 

r,-.C,-i£»i- 

r, -iC a -id i- 

This time, we would like to translate C V D as C V Z> (since C V Z> is positive), so that 
— i(C V D) is placed on the lefthand side of the sequent. This is indeed legitimate because 
—i(C Vf) = —iC A —\D is provable intuitionistically. 

Case 3. The last inference is 

Ft-C 

r i- \/xC 

where C is positive. The sequent r i- C is translated as T, -iC i-, and we have the inference 

r n Ci- 
r,3ic-iCi- 

We translate \fxC as —3x—\C, so that 3a;— iC is placed on the lefthand side of the sequent. 
Case 4. The last inference is 

Ti- ->C 

Ti- ViB-iC 
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where C is positive. The sequent T i- —iC is translated as F, C i-, and we have the inference 

r,ct- 
r,3xCt- 

We translate \/x—\C as -GaiC, so that 3a;C is placed on the lefthand side of the sequent. 
Case 5. The last inference is 

Ti- C[t/x] 
Fi- 3xC 

where C is positive. The sequent F i- C[t/x] is translated as T, —\C[t/x] i-, and we have the 
inference 

F,^C[t/x]t- 

r, Vic-iC i- 

We would like to translate 3a;C as 3a:C, so that —3xC is placed on the lefthand side of the 
sequent. This is possible because —3xC = \/x— \C is provable intuitionistically. 

Case 6. The last inference is 

ri- -,C[t/x] 
Fi- 3x^C 

where C is positive. The sequent F i- —\C[t/x] is translated as F, C[t/x] i-. We would like 
to translate 3x—iC as 3x—iC, so that — i3x— \C is placed on the lefthand side of the sequent. 
This is possible because —3x—iC = Vx—i—iC is provable intuitionistically, and we have the 
sequence of inferences 

r,C[t/iB]i- 

ri- -tC[t/x] 

r,-r->C[t/x]t- 

F, Vx-r-,C[t/x]t- 

Note that it was necessary to first double-negate C[t/x]. This is because — i3x— \C = 
\/x—i—iC is provable intuitionistically, but —3x— \C = \fxC is not. 

Case 1. The last inference is 

Y\- C T\- D 
Fi-C AD 

where C, D are positive. The sequents F i- C and r i- D are translated as F, — \C \- 
and r,— \D i-. Since C A D is positive, we would like to translate C A D as C A D, 
so that —\(C A D) is placed on the lefthand side of the sequent. This is possible because 
-t(— i— \C A —\—\D) = —\(C A D) is provable intuitionistically, and we have the sequence of 
inferences 
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T, -iC i- r, -iD i- 

ri- -i-iC ri- -nj 

r i- -.-iC A -nj 

r, — 1(— i— iC7 A i 

Case 8. The last inference is 

r i— \C r i- d 

Ti-^ChD 

where C , D are positive. The sequents T i- — \C and r i- D are translated as Y, C i- and 
r, — iD i-. Since — \C A D is positive, we would like to translate — iC A Z> as — iC A .D, so 
that — 1(— iC A .D) is placed on the lefthand side of the sequent. This is possible because 
— 1(— tC A — i — i-D) = — 1(— iC A D) is provable intuitionistically, and we have the sequence of 
inferences 

r, c i- r,-.L» i- 

ri- -€_ ri- -i-i j> 

r i— — iC a -i-iD 
r, ^(^c a -nD) i 

Ca^e 9. The last inference is 

r i— \C r i- -id 

r i- — iC a — i-D 

where C, Z> are positive. The sequents T i- -iC and T i- —\D are translated as T, C i- and 
r, D i-, and we have the inference 

r, C i- r,Dh 

r, c v d i- 

We translate —>C A -iZ) as -i(C V D), so that C V D is placed on the lefthand side of the 
sequent. 

Considering all the cases, we arrive at the following tables defining the Girard translation A 
of a formula. 

Definition 28 Given any formula A, its sign (polarity) and its Girard-translation A are given 
by the following tables: 

If A - P where P is an atom, including the constants T (true) and _L (false), then 
sign(A) - + and A - A, and if A is a compound formula then 
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Girard's ^-^-Translation 


A 




A A 5 


A V 5 


A D 5 


+,C 


+,£ 


+,CAf 


+,C\/D 


-p(CAnD) 


+,C 


-,-.2? 


+,C A-iD 


-,-KAO) 


-,-i(C A D) 


- -.c 


+,£ 


+,-iC A D 


-,-i(C A-iD) 




- -.c 


-,-.2? 


-,n(CV D) 


— , — i(C A .D) 


— , — 1( — iC A .D) 



Girard's ^-^-Translation 


A 








+,C 


— , — i3a;— iC 


+,3a;C 


- -.c 


- -.c 




+, 3a; -iC 





Given a formula A, we define its translation A as follows: 
A 



_ ( —iA ifsign(A) = +, 
I B ifsign(A) = — and A = 



iB. 



Then, a sequent T t- A is translated into the sequent F, A i . 

We have the following theorem. 

Theorem 10 Given any classical sequent T t- A if T i- A is provable classically, then its 
translation T, A i- is provable intuitionistically. 

Proof. By induction on the structure of proofs. We have already considered a number of 
cases in the discussion leading to the tables of Definition 28. As an auxiliary result, we need 
to show that the following formulae are provable intuitionistically: 



-i(C V D) 
i(-i-iC A 
-■(-iC A -i-iD) 
-.(-i-iC A -iD) 
-BxC 
-ax-€ 



-iC A-iD, 
-i(C A D), 

A D), 
-i(C A -iD), 

ViB-lC, 

Va;— i— iC. 



We leave the remaining cases as an exercise. □ 
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Observe that a formula A of any polarity can be made into an equivalent formula of polarity 
+, namely A + - A A T, or an equivalent formula of polarity — , namely A~ = A V — iT. The 
Girard-translation has some nice properties, and the following lemma lists some of them [9]. 

Lemma 19 The translation A i— > A given in Definition 28 is compatible with substitutions 
respecting polarities. Furthermore, it satisfies a number of remarkable identities: 

(i) Negation is involutive: —i— iA = A. 

(ii) De Morgan identities: -i(A A B) = -iiv ->B; -i(A V B) = —iA A ->B; A D B = 
->A V B; -MxA = 3x-tA; -3xA = Vx-iA. 

(Hi) Associativity of A and V; as a consequence, (A A B) D C = A D (B D C), and 
A D (B V C) = (A D B) V C. 

(iv) Neutrality identities: A V _L = A; A A — i _L = A. 

(v) Commutativity of A andM (as a consequence, iD B = —\B D —iA). 

(vi) Distributivity identities with restriction on polarities: A A (P V Q) = (A A P) V (A A Q); 
A V (X A M) = (A\/ L) h (A\/ M) (where P, Q are positive, and L, M negative). 

(vii) Idempotency identities: P + = P where P is positive; N~ = N where N is negative; 
as a consequence, A ++ = A + and A = A~. 

(viii) Quantifier isomophisms: A A 3xP = 3x(A A P) if x is not free in A and P is positive;; 
A V Va;iV = \fx(A V N) if x is not free in A and N is negative; 

Proof. The proof is quite straightforward, but somewhat tedious. Because of the polarities, 
many cases have to be considered. Some cases are checked in Girard [9], and the others can 
be easily verified. □ 
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